[THIN] Re: Tracert
- From: "Chris Lynch" <lynch00@xxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Fri, 27 Jun 2003 09:07:50 -0700
=20
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
It all depends on the firewall/router. If you block ICMP period, then =
the
answer is yes. If the firewall/router has an option for PING, then in =
most
cases the answer would be no. TRACERT sends a specific ICMP tag within =
the
ICMP packet. Same thing with PING.
Check out the RFC on ICMP, http://www.faqs.org/rfcs/rfc792.html. At the
bottom of the page, there is a header for Message Types. These are the
different types of ICMP packets. TRACERT uses Type 8 and I also believe =
0.
In order to block ICMP on a Cisco router, there are a few commands you =
need
to issue. DENY IP ANY ANY EQ ICMP will just not cut it. There are two
other ports that you need to deny, but that escapes me.
Chris
- -----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On =
Behalf
Of bbeckett2000@xxxxxxxxx
Sent: Friday, June 27, 2003 8:55 AM
To: windows2000@xxxxxxxxxxxxx; thin@xxxxxxxxxxxxx
Stupid question but when you want to prevent anyone pinging you boxes =
from
the outside world, you block ICMP packets. Does tracert also use ICMP
packets or something else? In other words, if you block ICMP, you block =
the
ability for others to ping you, does this also block a tracert?
********************************************************
This weeks sponsor - RTOSoft TScale
Complaints about applications response time - DO SOMETHING ABOUT IT!
TScale 2.0 improves applications response time and increases terminal =
server
capacity. Really get MORE from your existing servers! Free eval:
http://www.rtosoft.com/enter.asp?id=3D130
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode =
use
the below link:
http://thethin.net/citrixlist.cfm
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0
Comment: Public PGP key for Chris Lynch
iQA/AwUBPvxr1W9fg+xq5T3MEQKCRgCg97na9kQrFnCvx3vJynV9jsYyYKMAoOXb
/zT2IeRQIumUeepx8sUcwDrH
=3Dnq+2
-----END PGP SIGNATURE-----
********************************************************
This weeks sponsor - RTOSoft TScale
Complaints about applications response time - DO SOMETHING ABOUT IT!
TScale 2.0 improves applications response time and increases terminal
server capacity. Really get MORE from your existing servers! Free eval:
http://www.rtosoft.com/enter.asp?id=130
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
