4 ms·
Which actual security benefits do you get from blocking ICMP? Is that really worth it, considering that you break Path MTU Discovery, rendering your servers unu
by mmarx 10y ago
Which actual security benefits do you get from blocking ICMP? Is that really worth it, considering that you break Path MTU Discovery, rendering your servers unusable for some people?
- 0xl3vi 10y agoFor example: https://github.com/inquisb/icmpsh https://github.com/inquisb/icmpsh. "my servers" is my home servers not some "web servers". Maybe it's just me (: ( paranoid on security )
- newman314 10y agohttp://shouldiblockicmp.com http://shouldiblockicmp.com While it's good to be proactive about security, it is also helpful to understand why blocking icmp (particularly wholesale) is a bad idea. I had a network guy tell me the other day that he is blocking traceroute for "security reasons". I can't even... =(
- JdeBP 10y agoI made the mistake the other day of reminding my work colleagues of a certain instructional video relating to traceroute that did the rounds some years ago. Now they are joyfully calling it "Tracer T" all of the time. (-: