[Dshield] ICMP Echo Requests

Martin Sheard martin at mgjs.co.uk
Thu Dec 18 17:57:17 GMT 2003


I am using Sygate V 5.5. (the free one) set up so that the only
applications/Services that are set to allow access are:
Internet Explorer, Norton Liveupdate, Norton AV Agent, Outlook Express and
Proxomitron which are set to only act as client & not Allow ICMP traffic.

----- Original Message ----- 
From: "Nels Bels" <nelsbels at cableone.net>
To: "'General DShield Discussion List'" <list at dshield.org>
Sent: Thursday, December 18, 2003 3:53 PM
Subject: RE: [Dshield] ICMP Echo Requests


> What are you using for a firewall? Or are you using a router?
> Both have options to block or drop icmp traffic.
>
> -----Original Message-----
> From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On
> Behalf Of Martin Sheard
> Sent: Thursday, December 18, 2003 7:31 AM
> To: list at dshield.org
> Subject: [Dshield] ICMP Echo Requests
>
>
> Firstly can I apologize if this is the wrong place to ask this but I am
> unable to get any help from my service provider other than their
> suggestion to submit my firewall log files to Dshield which I have been
> doing since 9 Dec. but I see that Dshield ignores ICMP entries.
>
> Upto a couple of months ago I had a static IP address and had no
> problems but after a technical problem at my SP's end was repaired I
> have since had dynamic IP addresses. Very occasionally I get an IP
> address where I get no ICMP entries but most days I get approx 17,000
> per day.
>
> It appears that my firewall is blocking every attempt and Shields Up
> reports that my system is completely Stealthed. I run Norton AV everyday
> and have even downloaded and run the FixWelch program from Norton
> (reported - "W32.Welchia.Worm has not been found on your computer.").
>
> Do I have anything to worry about? Is there anything I can do to put an
> end to all the ICMP traffic?
>
> Martin Sheard
>
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
>
> -- 
> Incoming mail is certified Virus Free.
> Checked by AVG Anti-Virus (http://www.grisoft.com).
> Version: 7.0.209 / Virus Database: 261.5.1 - Release Date: 12/18/2003
>
>
> -- 
> Outgoing mail is certified Virus Free.
> Checked by AVG Anti-Virus (http://www.grisoft.com).
> Version: 7.0.209 / Virus Database: 261.5.1 - Release Date: 12/18/2003
>
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list





More information about the list mailing list