[unisog] Port 0

PaulFM paulfm at me.umn.edu
Thu Oct 27 15:52:00 GMT 2005


If they are ICMP, then the protocol is NOT UDP nor TCP (and blocking port 0 
UDP won't stop them).

Christensen, Eric wrote:

> I was reviewing my firewall logs this morning and found a few packets going
> to and from port 0.  Apparently they were ICMP packets.  I think that is
> probably legitimate but I'm thinking that many computers might accept these
> packets thinking they are legit when they are really attacks.  If they are
> just ICMP packets you could just block them.  Right?
> 
> Thanks,
> Eric Christensen
> Technology Support Specialist
>  
> ECU Police Department
> 608C E 10th St
> Greenville NC 27858-4353
> http://www.ecu.edu/police
> 
> EMERGENCY DIAL 911 
> (252)328-1155 - Office
> (252)328-6787 - 911 Communications
> (252)328-6965 - Fax
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog

-- 
---------------------------------------------------------------------
The views and opinions expressed above are strictly
those of the author(s).  The content of this message has
not been reviewed nor approved by any entity whatsoever.
---------------------------------------------------------------------
Paul F. Markfort   Info/Web: http://www.menet.umn.edu/~paulfm
---------------------------------------------------------------------


More information about the unisog mailing list