Re: [FW1] ICMP handling in 4.0 lame?

[Philipp Buehler <lists@fips.de>]

Brett Lymn wrote To lists@fips.de:
> According to Philipp Buehler:
> >
> >is there no ICMP Proxy, or checker to analyse/drop packets
> >with more content than the ICMP really needs?
> >
> 
> There are some intrusion detection tools that have been modified to
> detect connections to DoS tools.  Check out
> 
> <http://www.denialinfo.com/>

I will have a look on that.

 
> For more info on both how these DoS tools work and how they can be
> detected, oh and also a cool cartoon ;-)
Heh .. well, at least I would sleep better if I'd have the unwanted
traffic outside instead of hunting it down with an IDS :/.

ciao
-- 
Philipp Buehler, aka fIpS | BOfH | NUCH | double-p on IRC
When the horse dies, get off.
Artificial Intelligence stands no chance against Natural Stupidity.


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================