Alt Beer wrote:
> Does anyone know if it is possible and if so how to block incoming ICMP echo
> requests ?
Not entirely sure about that particular firmware version.
But why do you want to block ICMP echo?
Norton firewall users in particular seem to think that blocking ICMP on
dynamic IP addresses on dialup connections somehow increases their level
of security.
However, such things are frowned upon by the networking community. One
organisation I am aware of blocks "ping" (by which they mean the broken
UDP ping implementation used by certain redmondware boxen) "to prevent
hacking of unsecured windows PC's using that port"
So, they have a bunch of unsecured, unpatched, windows machines, which
are probably already owned and infected by half a dozen if not more
viruses, worms, and trojans, and instead of actually fixing the problem,
they block ping.
Aaargh.
|