4 ms·
They are not braindead. ICMP used to be a bit broken and folks got sick of ping floods, sweeps, redirect attacks and tunneling hacks etc. Some pretty major plac
by temp667 5y ago
They are not braindead. ICMP used to be a bit broken and folks got sick of ping floods, sweeps, redirect attacks and tunneling hacks etc. Some pretty major places block ICMP as a result to keep their network reasoning and security analysis simpler.
- korethr 5y agoJust because they are major places doesn't mean they are right or such practice buys any improvement in security worth the operational cost it imposes.
- bcrl 5y agoICMP ping of death was a thing in the 1990s. Those bugs have been fixed for more than 2 decades now.
- viraptor 5y agoWhat do ping floods do that TCP syn floods don't? (I expect you run at least one service on the exposed hosts) Also what system even accepts ICMP based route redirects by default from the open internet?