Re: IPCop v1.4.5 Configuration

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Craig White
Date:  
To: plug-discuss
Subject: Re: IPCop v1.4.5 Configuration
On Wed, 2005-05-04 at 00:19 +0000, Jonathan Claxton wrote:
>
> On Tue, 3 May 2005, Major.Mikey wrote:
>
> > I have some questions about IPCop:
> > 1- What do I apt-get? I tried IPCop, ipcop, IP<tab><tab>, and ip<tab><tab>
> > None of these returned anything of use
>
> try googleing for it in which case www.ipcop.org will pop right out to ya.
> :)
>
> > 2- Why would I want to prevent ping returns?
>
> If one pings a ip address and gets a response back, one can start to crack
> crack crack crack.... welll..you get the point, it's like a very big
> bulleyes has been painted on the PC.
>
> If someone were to tell ya the ip address of their internet connection
> that does not respond to pings and you ping it, you WILL NOT get anwser
> back at all. Now you got a choice, either spend a LOT of time and energy
> trying to get any kind of respose or just move on since it's very unlikely
> you are not going to be able to get thru.

----
I think that this is absurd - there isn't any danger of being hacked
because your machine responds to pings. The only danger is from things
like DOS based upon ping/ping floods.

There is no bullseye on your machine because it responds to pings.

I suppose that there might be some kind of stealth program to hide what
your machine OS is but chances are that an up to date nmap would likely
fingerprint it anyway unless you really work it to make it appear like
it were a Windows machine.

Anyway, to answer the OP...

You can check if system is alive and responding via ping. If you shut
that off, you wouldn't get a response so you would have to resort to
other methods to test for the presence. The posit that permitting pings
represents a security threat is highly subjective and I surely haven't
see anything in that answer or in any relatively current kernel that
makes me worry about it.

Craig

---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss