[techtalk] Getting a computer on a network.

[gandalf]

I may be wrong on this, I haven't really been following the thread all
that intently.

if the admin setup the security to reject ICMP, then ping wouldn't work,
and neither would traceroute. While ICMP seems like a pointless thing to
block, other things use ICMP such as snmp, I believe, in which case
turning off ICMP would prevent unauthorized people from gaining access to
network information, or making something like a network map of your
systems from the outside. There are much better ways to prevent this
without disabling ICMP and screwing up ping and traceroute, however,
blocking all ICMP into and out of a network is much easier than actually
sitting down and reading a book, I suppose


gandalf


On Fri, 18 Feb 2000, Tamara Thompson wrote:

> But Jeff, I've seen situations where ping has been turned off for security reasons.  
> 
> Haven't followed this thread closely, has traceroute been tried?  
> 
> Is telnet turned on on the machine you can't telnet to?
> 
> 
> 
> >>> Jeff Dike <jdike at karaya.com> 02/18 1:03 PM >>>
> > I can ssh to any server (there are dozens) from my puter but I can't
> > telnet to my puter from the servers..   I'm thinking it has something
> > to do with how security is set up but I don't know. 
> 
> I think your site has network connectivity problems.  Regardless of security 
> policy, all machines should be able to ping each other.
> 
> 				Jeff
> 
> 
> 
> ************
> techtalk at linuxchix.org   http://www.linuxchix.org 
> 
> 
> 
> ************
> techtalk at linuxchix.org   http://www.linuxchix.org
> 
> 


************
techtalk at linuxchix.org   http://www.linuxchix.org