RE: How to deny traceroute?

From: Mas Kato (tealp729@xxxxxxxx)
Date: Fri May 04 2001 - 03:00:49 GMT-3

• Next message: andrew.2.shore@xxxxxx: "RE: Good IpSec/IKE book"
• Previous message: Clifton Stewart: "How to deny traceroute?"
• Maybe in reply to: Dreams Ruan: "How to deny traceroute?"
• Next in thread: Rob Hopkins: "Re: How to deny traceroute?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
Cisco traceroute targets UDP ports starting at 33434 in the outbound
direction. The returns are ICMP 'port-unreachable' messages.

I'm a little weak on other implementations of traceroute, but
interestingly enough, there is a 'traceroute' ICMP message-type.
Apparently, other implementations of traceroute may use this, along with
ICMP 'time-exceeded' and/or ICMP 'ttl-exceeded.'

There's more in the archives...

Regards,

Mas Kato

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Dreams Ruan
Sent: Thursday, May 03, 2001 10:37 PM
To: ccielab@groupstudy.com
Subject: How to deny traceroute?

Hi,guys:

    How to set the access-list to deny traceroute packet ? Thanks!

                    VB
@q#!

            Dreams Ruan
            dreams_r@163.com
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html

• Next message: andrew.2.shore@xxxxxx: "RE: Good IpSec/IKE book"
• Previous message: Clifton Stewart: "How to deny traceroute?"
• Maybe in reply to: Dreams Ruan: "How to deny traceroute?"
• Next in thread: Rob Hopkins: "Re: How to deny traceroute?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:30:33 GMT-3