ICMP 8 OPEN

[Hudson Delbert J Contr 61 CS/SCBN]

	to :listsysop, gurus and other s.a. types,,

	i've posted in the past in regards to the number of queries i've
seen on this list
	in regards to some of the security items. i think this points out
that some of migration
	from winBlowzMe clients to open source platforms seems to really be
occurring.
	a large portion of this migratory community appear not to have the
most basic unix
	netsec. is there an ubuntu-howto-lockdown in progress. i am never
convinced the any
	OS vendor, maybe other than OpenBSD is CLOSE to being secure out of
the box.

	i want to see whats under the hood. also questions such as this
could be directed to
	a platform specific (ubuntu) methodology without sending the newbs
out to SAGE or
	SANS. i dont want to re-produce the dangerous WinDOZe security
syndrome of set it and
	forget it.

	we need to impart right security mindset so we dont get inaccuracy
propagated.
	.i.e. - 	the reference to the icmp packet detected is not an
error, it is an event
			that happens based on either a known security
policy.
			i see no explanation regarding this so that the user
does not
			continue to consider this an error. 

	ubuntu-user-security would be a good name. 
	this client can connectto a network. that makes it a target either
now or later.

	it seems to have been swept under the rug.

	ubuntu is an excellent distro andithink it would be helpful.

	v/r,
	~piranha	


-----Original Message-----
From: ubuntu-users-bounces at lists.ubuntu.com
[mailto:ubuntu-users-bounces at lists.ubuntu.com]On Behalf Of Warty Warthog
Sent: Tuesday, October 26, 2004 5:26 PM
To: ubuntu-users at lists.ubuntu.com
Subject: Re: ICMP 8 OPEN


It works. 
- João Inácio <inacio at promoloures.pt> wrote:

> 
> Firestarter firewall can also block icmp requests,
> is in the preferences :)
> 
> Cheers,
> João Inácio
> 
> Warty Warthog wrote:
> 
> >http://scan.sygate.com/quickscan.html when I scan
> my
> >Ubuntu box I get the following error:
> >Protocol  Type  Status      Additional Information
> > ICMP      8     OPEN    An ICMP ping request is
> >usually used to test Internet access. However, an
> >attacker can use it to determine if your computer
> is
> >available and what OS you are running. This gives
> him
> >valuable information when he is determining what
> type
> >of attack to use against you.
> >
> >What does it mean? and with or without firestarter
> >firewall I get such error. How can I avoid this
> error?
> 
> 
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
>
http://lists.ubuntu.com/mailman/listinfo/ubuntu-users
> 



		
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail 

-- 
ubuntu-users mailing list
ubuntu-users at lists.ubuntu.com
http://lists.ubuntu.com/mailman/listinfo/ubuntu-users