2 ms·
No, it's my firewall setup. I blocked ICMP for security reasons on my servers (:
by 0xl3vi 10y ago
No, it's my firewall setup.
I blocked ICMP for security reasons on my servers (:
- mmarx 10y agoWhich actual security benefits do you get from blocking ICMP? Is that really worth it, considering that you break Path MTU Discovery, rendering your servers unusable for some people?
- 0xl3vi 10y agoFor example: https://github.com/inquisb/icmpsh https://github.com/inquisb/icmpsh. "my servers" is my home servers not some "web servers". Maybe it's just me (: ( paranoid on security )
- newman314 10y agohttp://shouldiblockicmp.com http://shouldiblockicmp.com While it's good to be proactive about security, it is also helpful to understand why blocking icmp (particularly wholesale) is a bad idea. I had a network guy tell me the other day that he is blocking traceroute for "security reasons". I can't even... =(
- JdeBP 10y agoI made the mistake the other day of reminding my work colleagues of a certain instructional video relating to traceroute that did the rounds some years ago. Now they are joyfully calling it "Tracer T" all of the time. (-: