Re: [PATCH net-next v2] ipv4: Add support to disable icmp timestamp

2019-05-13 Thread Michal Kubecek
On Tue, May 14, 2019 at 10:56:54AM +0800, Weilong Chen wrote: > The remote host answers to an ICMP timestamp request. > This allows an attacker to know the time and date on your host. > > This path is an another way contrast to iptables rules: > iptables -A input -p icmp --icmp-type timestamp-requ

Re: [PATCH net-next v2] ipv4: Add support to disable icmp timestamp

2019-05-13 Thread David Miller
From: Weilong Chen Date: Mon, 13 May 2019 21:28:57 +0800 > The remote host answers to an ICMP timestamp request. > This allows an attacker to know the time and date on your host. > > This path is an another way contrast to iptables rules: > iptables -A input -p icmp --icmp-type timestamp-request

Re: [PATCH net-next v2] ipv4: Add support to disable icmp timestamp

2019-05-13 Thread Florian Westphal
Weilong Chen wrote: > The remote host answers to an ICMP timestamp request. > This allows an attacker to know the time and date on your host. No, it does not, I already told you so in V1 :-/ If you really think that its a problem that one can discover milliseconds-since-midnight please just chan