OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: [fw-wiz] ICMP blocking on PIX .4.4.1
From: majordomo (listsindifference.org)
Date: Fri Apr 28 2000 - 09:53:02 CDT

>
> Allowing ICMP (or any connection-less protocol, such as UDP) *through*
> the firewall is another issue entirely. Connection-less protocols are
> not safe. Cannot be made safe. Other than perhaps allowing syslog
> from the router to a syslog host, specifically, I don't see any
> particular reason to allow any UDP through a firewall.

Doesn't DNS use udp? As for the icmp issue, I agree with you.

K.J.