Re: Questions about ICMP

Thread View: at.mail.firewalls

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Ryan Russell Wed, 15 Apr 1998 00:00

#138

Author: Ryan Russell
Date: Wed, 15 Apr 1998 00:00

76 lines
3348 bytes

Route gave a demo at last year's Black Hat Briefings.  I think
the tool was Loki, but I can't be sure.  Check the last few issues
of Phrack at www.phrack.com.

                    Ryan





Magnus Timmerby <mti@rsn.hk-r.se> on 04/11/98 05:57:41 AM

To:   firewalls@GreatCircle.COM
cc:    (bcc: Ryan Russell/SYBASE)
Subject:  Re: Questions about ICMP




> Has anyone seen someone try to tunnel (or attempted to do so) IP over
> ICMP before?

It is certainly possible and has been done. I don't remember any
references though, sorry.

/mti

Received: from tunnel.sybase.com ([130.214.231.88]) by ibwest.sybase.com
(Lotus SMTP MTA v4.6.1  (569.2 2-6-1998)) with SMTP id 882565E3.004E9F2A;
Sat, 11 Apr 1998 07:18:45 -0700
Received: from smtp1.sybase.com (smtp1 [130.214.220.35])
          by tunnel.sybase.com (8.8.4/8.8.4) with SMTP
       id HAA26868 for <Ryan_Russell@tunnel-w>; Sat, 11 Apr 1998 07:17:42
-0700 (PDT)
Received: from halon.sybase.com by smtp1.sybase.com
(4.1/SMI-4.1/SybH3.5-030896)
     id AA28056; Sat, 11 Apr 98 07:17:41 PDT
Received: from relay1.UU.NET (relay1.UU.NET [192.48.96.5])
          by halon.sybase.com (8.8.4/8.8.4) with ESMTP
       id HAA25258 for <Ryan.Russell@sybase.com>; Sat, 11 Apr 1998 07:17:58
-0700 (PDT)
Received: from honor.greatcircle.com by relay1.UU.NET with ESMTP
     (peer crosschecked as: honor.greatcircle.com [198.102.244.44])
     id QQekqr03797; Sat, 11 Apr 1998 10:15:16 -0400 (EDT)
Received: (majordom@localhost) by honor.greatcircle.com
(8.8.5/Honor-Lists-970926-1) id GAA00999; Sat, 11 Apr 1998 06:32:49 -0700
(PDT)
Received: from miles.greatcircle.com (miles.greatcircle.com
[198.102.244.45]) by honor.greatcircle.com (8.8.5/Honor-980202-1) with
ESMTP id FAA27990 for <firewalls@GreatCircle.COM>; Sat, 11 Apr 1998
05:58:47 -0700 (PDT)
Received: from asterix.rby.hk-r.se (asterix-129.rby.hk-r.se
[194.47.129.30])
     by miles.greatcircle.com (8.8.5/8.8.5) with ESMTP id FAA09980
     for <firewalls@greatcircle.com>; Sat, 11 Apr 1998 05:56:11 -0700 (PDT)

Received: from kobold.rby.hk-r.se (pt96mti@kobold [194.47.134.176])
     by asterix.rby.hk-r.se (8.8.7/8.8.7) with ESMTP id OAA16723
     for <firewalls@greatcircle.com>; Sat, 11 Apr 1998 14:57:42 +0200 (MET
DST)
Received: (from pt96mti@localhost)
     by kobold.rby.hk-r.se (8.8.7/8.8.7) id OAA15297;
     Sat, 11 Apr 1998 14:57:41 +0200 (MET DST)
Date: Sat, 11 Apr 1998 14:57:41 +0200 (MET DST)
Message-Id: <199804111257.OAA15297@kobold.rby.hk-r.se>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
From: Magnus Timmerby <mti@rsn.hk-r.se>
To: firewalls@GreatCircle.COM
In-Reply-To: Michael Conlen's message of Sat, 11 Apr 1998 02:51:39 -0400
(EDT)
Subject: Re: Questions about ICMP
Sender: firewalls-owner@GreatCircle.COM
Precedence: bulk

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads