Re: [FW1] ICMP handling in 4.0 lame?

[Philipp Buehler <lists@fips.de>]

Brett Lymn wrote To THELLIER, Francis:
> A word of warning here - a lot of the distributed DoS tools that are
> being used by attackers use ICMP packets as a communication medium
> between the master controller and the DoS slave processes.  You may
> want to consider carefully why you want to have ICMP coming back into
> your intranet at all.
is there no ICMP Proxy, or checker to analyse/drop packets
with more content than the ICMP really needs?

--- End of mail from Brett Lymn ---
ciao
-- 
Philipp Buehler, aka fIpS | BOfH | NUCH | double-p on IRC
When the horse dies, get off.
Artificial Intelligence stands no chance against Natural Stupidity.


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================