Best way to filter "Nachi pings"?
Brett Glass
brett at lariat.org
Mon Oct 27 08:27:05 PST 2003
At 03:17 AM 10/27/2003, Jarkko Santala wrote:
>Blocking
>all ping packets to improve security is nothing more than security through
>obscurity. It may hide your system against the simplest ping probes, but
>it does nothing to improve security as such.
In our case, there's a more compelling reason.
Some of our customers' system administrators have utilities
which ping their servers from their home Internet connections
to make sure everything's working. If I were to block pings,
all of these guys' (and gals') pagers and cell phones would go
off at once. I'd be beseiged with demands to remove the block
immediately.
--Brett
More information about the freebsd-security
mailing list