Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If the destination machine has disabled ping, what response is recieved?


“ping” is ICMP ECHO_REQUEST and ICMP ECHO_RESPONSE. Traceroute uses ICMP TIME_EXCEEDED. So blocking only “ping” will not affect traceroute. And if you block all ICMP, you break your own internet: <http://shouldiblockicmp.com/>


The number of companies that I've encountered that wholesale block ICMP because "security" is painfully high.


nothing from that machine, but the way the ttls work, it doesn’t affect the responses from routers along the way. Same if the destination doesn’t exist at all.


Totally untrue. Network admins will often disable traceroute responses because security.

Edit: the less someone knows about your internal topology the better. Security through obscurity does work.


I was answering a question about what happens if it is disabled on the destination machine. The destination machine has no say over any other device along the route.


~~ Security through obscurity does work.

As a layer.


Windows disables ping by default for what I'm guessing is security.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: