[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ICMP drop.



On Thu, 09 Oct 2003 19:15:01 +1000, 
Rudi Starcevic <rudi@oasis.net.au> wrote in message 
<3F852715.2050700@oasis.net.au>:

> Hi,
> 
> >This *will* make your life miserable, as you suddenly can't connect
> >to, or be connected to from, a large proportion of systems.
> >
> 
> Thanks - sorry such novice questions.
> I am working through a Snort book right now - guess I should get a TCP
> one next.
> 
> I've had Snort up and running only for a day or so and noticed an IP 
> that first pinged me then followed up with loads of request on all
> sorts of ports which triggered dozens of alerts.

..yeah, sounds like he found you.  ;-)
 
> So I had the silly idea to drop icmp packets and be anonymous.
> As I now know you'll also end up lonely if you drop icmp packets
> So it not really possible be anonymous. 

..ok, most people run some kinda Wintendo, right?  Hide in da crowd,
"become" one.  A _boring_ one, say an overloaded 98 falling over 
on that last drop gone of virus weeder.

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.




Reply to: