Thread View: comp.dcom.sys.cisco
6 messages
6 total messages
Started by emery
Thu, 16 Apr 1998 00:00
why the Router still answer ? (to a ping or a tracert )
Author: emery
Date: Thu, 16 Apr 1998 00:00
Date: Thu, 16 Apr 1998 00:00
14 lines
1144 bytes
1144 bytes
hello, I have done the config for two Router for a DMZ and I have desactivate UDP small server , tcp small serveur and no finger etc... and i was thincking he will not answer to a ping but he still answer. Can you tell me how I need to do to stop the reply ? because if he reply (My routeur) somebody can overload my router not thrue ? many thanks for your helps. Phil
Re: why the Router still answer ? (to a ping or a tracert )
Author: Barry Margolin
Date: Thu, 16 Apr 1998 00:00
Date: Thu, 16 Apr 1998 00:00
17 lines
1567 bytes
1567 bytes
In article <35366875.0@news.iprolink.ch>, emery <emery-ph@iprolink.ch> wrote: >I have done the config for two Router for a DMZ and I have desactivate UDP >small server , tcp small serveur and no finger etc... > >and i was thincking he will not answer to a ping but he still answer. > >Can you tell me how I need to do to stop the reply ? >because if he reply (My routeur) somebody can overload my router not thrue ? I think you will have to block it with an inbound packet filter on the serial port. -- Barry Margolin, barmar@bbnplanet.com GTE Internetworking, Powered by BBN, Cambridge, MA *** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Re: why the Router still answer ? (to a ping or a tracert )
Author: Javier Henderson
Date: Thu, 16 Apr 1998 00:00
Date: Thu, 16 Apr 1998 00:00
12 lines
1081 bytes
1081 bytes
"emery" <emery-ph@iprolink.ch> writes: > I have done the config for two Router for a DMZ and I have desactivate UDP > small server , tcp small serveur and no finger etc... > > and i was thincking he will not answer to a ping but he still answer. What exactly did you disable, besides the udp/tcp small servers and the finger services? -jav
Re: why the Router still answer ? (to a ping or a tracert )
Author: Jon Gray
Date: Fri, 17 Apr 1998 00:00
Date: Fri, 17 Apr 1998 00:00
29 lines
1539 bytes
1539 bytes
Ping does not use TCP or UDP, nor does it have anything to do with Finger. Ping uses ICMP, which is an IP Level protocol. Any system that has an active TCPIP stack loaded (DOS, Windows, Unix, MVS, etc) will respond to an ICMP request with an ICMP reply. Regards, Jon Gray emery wrote in message <35366875.0@news.iprolink.ch>... >hello, > >I have done the config for two Router for a DMZ and I have desactivate UDP >small server , tcp small serveur and no finger etc... > >and i was thincking he will not answer to a ping but he still answer. > >Can you tell me how I need to do to stop the reply ? >because if he reply (My routeur) somebody can overload my router not thrue ? > >many thanks for your helps. > >Phil > >
Re: why the Router still answer ? (to a ping or a tracert )
Author: emery
Date: Fri, 17 Apr 1998 00:00
Date: Fri, 17 Apr 1998 00:00
46 lines
2220 bytes
2220 bytes
only this 3 things no finger services no udp small serveurs and no tcp serveurs . as I understand i should do a paquet filtering....with access-list i believe.how exactly ? best regards and thanks in advance Phil. PS : did you know a programme available on internet or to pay to test if my router is secure ? -----Message d'origine----- De : Javier Henderson <Javier@Cisco.COM> Groupes de discussion : comp.dcom.sys.cisco,comp.protocols.tcp-ip,fa.cisco,fr.comp.securite Date : jeudi, 16. avril 1998 23:54 Objet : Re: why the Router still answer ? (to a ping or a tracert ) >"emery" <emery-ph@iprolink.ch> writes: > >> I have done the config for two Router for a DMZ and I have desactivate UDP >> small server , tcp small serveur and no finger etc... >> >> and i was thincking he will not answer to a ping but he still answer. > > What exactly did you disable, besides the udp/tcp small >servers and the finger services? > >-jav Javier Henderson a οΏ½crit dans le message <861zux4emc.fsf@limpia.kjsl.com>... >"emery" <emery-ph@iprolink.ch> writes: > >> I have done the config for two Router for a DMZ and I have desactivate UDP >> small server , tcp small serveur and no finger etc... >> >> and i was thincking he will not answer to a ping but he still answer. > > What exactly did you disable, besides the udp/tcp small >servers and the finger services? > >-jav
Re: why the Router still answer ? (to a ping or a tracert )
Author: Lorenzo Cavallaro
Date: Tue, 21 Apr 1998 00:00
Date: Tue, 21 Apr 1998 00:00
33 lines
2030 bytes
2030 bytes
In comp.protocols.tcp-ip emery <emery-ph@iprolink.ch> wrote: : -----Message d'origine----- : De : Javier Henderson <Javier@Cisco.COM> : Groupes de discussion : : comp.dcom.sys.cisco,comp.protocols.tcp-ip,fa.cisco,fr.comp.securite : Date : jeudi, 16. avril 1998 23:54 : Objet : Re: why the Router still answer ? (to a ping or a tracert ) :>"emery" <emery-ph@iprolink.ch> writes: :> :>> I have done the config for two Router for a DMZ and I have desactivate : UDP :>> small server , tcp small serveur and no finger etc... :>> :>> and i was thincking he will not answer to a ping but he still answer. :> :> What exactly did you disable, besides the udp/tcp small :>servers and the finger services? :> :>-jav First off Hello :) I dunno if I have understood the question, but the router is still responding to the ping,since ping program doesn't use tcp/udp protocol, but it uses ICMP (Internet Message Controll Protocoll) message. Exactly it uses the ICMP ECHO and ICMP ECHO REPLY messages to query (ping), the host. So even if u disable all tcp/udp based stuff you're still able to ping it. Bye all Lorenzo
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads