-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I block pings on my server, and for a reason.  Ping is one of the
biggest tell-alls about a network.  No outside entity should ever
need to ping me, & my own machine has no real reason to ping itself,
either.  

Try this:  ping first.three.octets.255 & see what happens.  It will
return every machine attached to that network.  I don't want the
gomers to have such an easy time finding who's attached.

& for you gomers who're lurking this list...  :P

- -Tom

- -----Original Message-----
From: Edward Dekkers [mailto:[EMAIL PROTECTED]]
Sent: Sunday, February 09, 2003 9:06 PM
To: [EMAIL PROTECTED]
Subject: Re: Can't ping myself.


> Any other good idea ?
>
> Thanks alot!
>
> Lei

Use an iptables firewall script, but don't run it so tight. Learn a
little
about iptables and roll your own.

Jeez - even Monmotha's script doesn't even let me ping the server
from a
client I found out the other day.

Just a side-note to everyone else:

I realise there's things like ping-floods, DOS attacks etc. etc. etc.
and we
have to protect against them, but most users would choose an
intermediate or
high firewall setting when they set up their boxes. Both these block
ICMP
requests. A lot of users are running ping to test network
connectivity.

Is there any way to get around this problem? Surely the default
firewall
set-up could be set up to allow ICMP request from the internal
interface,
just not forward those from the external?

Sorry if I sound naive. Firewalls are not my strong point, but I know
I find
myself sighing every time I'm testing connectivity on a Linux
network, and I
have to turn off the user's firewall just to test with ping.
Invariably I
always forget.

Regards,

- ---
Edward Dekkers (Director)
Triple D Computer Services P/L




- -- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.3

iQA/AwUBPkensNPjBkUEZx5AEQJMZACg7lrCTfCJmTYGTNK61YHYHzkoidEAoJr4
CJ8MAEatntrf/GqhCq3SyNkR
=K68n
-----END PGP SIGNATURE-----



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to