OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: ICMP filtering?

ICMP filtering?

MICHAEL R. WIDNER (WIDNERMhsdwl.utc.com)
27 Apr 1994 09:18:45 -0400 (EDT) 

In a previous message ccdesccdes.princeton.nj.us wrote
> I know we are getting a cisco router, and I have a question for anyone -
> what is the latest version of the router software I need to run to keep
> fake ICMP packets from reaching my hosts?  I believe that this was a
> somewhat recent upgrade by cisco, thus the presence of nuke.c or whatever
> being used to annoy people.  

Is this true?  If so, I'd be interested to know how this is implemented
and also what software revision is required.  We use quite a few routers
here, some Cisco, some not.  I don't see how one could filter 'fake'
icmp destination unreachable messages without actually filtering all
real ones as well.

-Mike Widner