Berkeley CSUA MOTD:Entry 25396
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2025/05/26 [General] UID:1000 Activity:popular
5/26    

2002/7/20-21 [Computer/Networking] UID:25396 Activity:high
7/20    I though ping and traeroute used the same protocol.  Is it possible
        to block the routing of ping requests without blocking the routing
        of traceroutes?
        \_ yes.  they both use ICMP, but different aspects of it.
           (Blocking either is probably a bad decision).  -tom
           \_ Why would you say blocking ping/traceroute is a bad decision?
              I've blocked both for years and nothing has happened.
                \_ I suppose it's OK if you're the only network user.
                   It's a bad decision on multi-user networks, because it
                   removes the only tools users have to figure out where
                   or what a problem is.  It could also block your ISP from
                   properly diagnosing a network problem.  -tom
           \- i think it is perfectly reasonable to block ping and traceroute
              for a "personal network space". for a larger institution
              obviously a decision for "everyone" depends on circumstances
              but doing it via a host-based firewall is also quite reasonable.
              if you are going to firewall in teh first place, then i dont
              thing adding these blocks is any big deal. --psb
           \_ blocking icmp at your upstream can help prevent some DDoS attacks
              though they could always switch to a different type (udp, etc)
        \_ traceroute usually uses udp for outbound, and icmp ttl exceeded
           on the inbound. ping is just icmp echo/reply.  You could
           theoretically get up to 9 hops of traceroute with ping's
           record-route option, but its not same as traceroute. depending
           on how your filters work, you could block ping and traceroute
           into your systems, and still enable it outbound. -ERic
2025/05/26 [General] UID:1000 Activity:popular
5/26    

You may also be interested in these entries...
2011/11/8-30 [Computer/SW/Security, Computer/SW/OS/Windows] UID:54218 Activity:nil
11/8    ObM$Sucks
        http://technet.microsoft.com/en-us/security/bulletin/ms11-083
        \_ How is this different from the hundreds of other M$ security
           vulnerabilities that people have been finding?
           \_ "The vulnerability could allow remote code execution if an
               attacker sends a continuous flow of specially crafted UDP
	...
2009/7/4-16 [Computer/SW/WWW/Browsers] UID:53111 Activity:low
7/4     Is there a web browser available on soda?  My employer has a firewall
        blocking some web sites.
        \_ How about setting up a web proxy on Soda?
          \_ Use links :)
                \_ lynx?
        \_ Best text only web browser is elinks, it even supports some
	...
2009/5/7-14 [Computer/Networking, Computer/SW/Unix] UID:52962 Activity:nil
5/7     What's a good reverse port forwarding for a PC(inside firewall) ->
        Unix, so that I can VNC into the Unix that gets forwarded to
        PC's VNC server?
        \_ http://micrux.net/?p=26
           Syntax, to be executed from the PC behind firewall:
           % ssh -R 5900:127.0.0.1:5901 <destination_server>
	...
2009/5/5-6 [Computer/SW/SpamAssassin, Computer/SW/Unix] UID:52948 Activity:moderate
5/4     Is mail still down? I don't seem to be getting any and vermouth
        is unavailable. I saw a note saying it was down Sunday, but it's
        almost Tuesday now.
        \_ exim4 decided it wanted to just die. With the same config file and
        everything. Steven spent all weekend and a lot of yesterday migrating
        to a VM. A side effect is that NFS is now no longer on Keg, so crashy
	...
2009/4/22-28 [Computer/SW/Security] UID:52894 Activity:nil
4/22    ok, here's a little networking puzzler. I haven't been able to access
        youtube for a couple weeks. Couldn't figure out why. Happened on all
        browsers. traceroute did weird stuff and then timed out. Finally I
        got so frustrated I setup firefox to ssh tunnel through soda.csua,
        which worked great. Then, I kill the ssh proc, quit FF, and now,
        I can access youtube just fine from any browser. wtf? any
	...
2009/2/27-3/5 [Computer/Networking] UID:52658 Activity:nil
2/27    I need to buy a wireless router, can u guys help me out?   I need the
        following features:  wireless, G or better, PPTP dial up, PPoE dialup,
        VoIP/SIP register, DDNS, uPnP.
        I am having a such hard time to find a review site which allow me to
        select these features.   Any ideas?  There are a couple model from
        this small company Draytek has these features, I am having the hardest
	...
2008/12/2-6 [Computer/SW/Apps, Academia/Berkeley/CSUA/Motd] UID:52140 Activity:kinda low
12/1    Just curious -- what do you guys generally use soda for? Why do you
        log on? Personally, I use it to keep a presence on IRC and AIM/gTalk
        at all times, and mess around with some Python programming (been
        setting up Twisted and such so I can play with making an irc bot).
        --toulouse
        \_ I use it to post SHIT, er, I mean, spill my guts about the company
	...
2008/9/29-10/1 [Computer/Networking] UID:51325 Activity:nil
9/29    I'm looking for a new wireless router / firewall, preferably
        something that supports 802.11n. Any recommendations?
        \_ Which 802.11n?
           \_ Draft 2.0 or whatever version is supported by the the
              MacBook and iMac.
	...
2008/8/5-10 [Computer/Networking] UID:50788 Activity:nil
8/5     It looks like my company has started blocking HTTPS tunneling.
        I used to do this by tunneling SSH through the HTTP/HTTPS proxy
        server, but this seems to have stopped working. Does anyone know
        how the implementation of tunneling detection works, and whether
        there are widely available implementations? We run a bunch of MS
        stuff, so I imagine we're running an MS proxy server or something.
	...
2008/3/2-6 [Computer/Networking] UID:49314 Activity:nil
3/2     Is anyone using Sveasoft firmware with a Linksys router? How well
        does it work, esp. as a firewall? tia.
	...