Mailinglist Archive: opensuse-security (564 mails)
| < Previous | Next > |
Re: [suse-security] block traceroutes with iphains
- From: "Kurt Seifried" <listuser@xxxxxxxxxxxx>
- Date: Mon, 22 Jan 2001 16:03:14 -0700
- Message-id: <00b501c084c7$7fbfabc0$ca00030a@xxxxxxxxxxxx>
> Why?
>
> Any traceroute will still show every router hop leading to you. You
> can't hide on the Internet.
>
> Traceroutes serve a very useful purpose. It's not good citizenship to
> try blocking them.
I disagree strongly. The local university blocks them (ICMP ones anyways) at
their perimeter, so you can't map out the internal network so easily. Why is
this being bad? I'd say it's a good neighbour policy, makes them a little harder
to break into (and thus be used to attack me). It's not like you can do anything
to FIX the problem when you see one nowadays (hell, good luck even figuring out
who to contact).
-Kurt
>
> Any traceroute will still show every router hop leading to you. You
> can't hide on the Internet.
>
> Traceroutes serve a very useful purpose. It's not good citizenship to
> try blocking them.
I disagree strongly. The local university blocks them (ICMP ones anyways) at
their perimeter, so you can't map out the internal network so easily. Why is
this being bad? I'd say it's a good neighbour policy, makes them a little harder
to break into (and thus be used to attack me). It's not like you can do anything
to FIX the problem when you see one nowadays (hell, good luck even figuring out
who to contact).
-Kurt
| < Previous | Next > |