[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] ICMP protocol



Nic LAWRENCE wrote:
> One question I have is, is there any particular reason why you specifically
> specified the destination IP on the tcp and udp rules? Is there a reason why
> you wouldn't want it to apply to "anywhere",.. or do you just "have to"
> specify a destination?
UNIX traceroute uses UDP to 'trace' the route around the network,
Windows use Echo ICMP packets

Its normally from a fixed UDP source port to an incrementing destination
port.

Hope this helps,

--Gareth