Once upon a time, Nick Jennings <nick@(protected):
> I was also curious about the effectiveness of disabling ICMP requests,
> and also using the firewall to block port scanning. I'm wondering if
> this is worth doing (is it really *that* effective in deterring
> attacks?) and if there are any downsides to this?

Blocking ICMP doesn't really help (and if you just block all ICMP can
break things like path MTU detection). You are going to be running
well-known services on well-known ports, so port scanning isn't really
an issue either; I don't know of any downsides to trying to block port
scanning, but I also don't really see an upside.

Mainly, you have to realize that you are putting a live server on the
Internet, which is similar to painting a big target on your back. You
need to take reasonable steps to keep your system secure (password
security is highly important, keeping up with security updates is also a
big one).

--
Chris Adams <cmadams@(protected)>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.

_______________________________________________
rhelv5-list mailing list
rhelv5-list@(protected)
https://www.redhat.com/mailman/listinfo/rhelv5-list