Is there any point in having a firewall if you already have a router?
Are ICMP ping request dangerous?
Port forwarding is a security hole yet everyone does it anyway. What can you do with an open port? How dangerous is it?
Name:
Anonymous2010-02-08 9:12
bump
Name:
Anonymous2010-02-08 15:26
So long as your router performs packet inspection and NAT conversion, no.
ICMP pings are not inherently dangerous except for old systems that are vulnerable to the Ping Of Death.
Port forwarding opens a specific port on a system inside your network. If an attacker was able to exploit a vulnerability of the application listening on that port, he could gain access to that system and, possibly, any other systems that the vulnerable system can reach. Never, ever, ever, ever, ever, ever forward the default Microsoft SMB/CIFS ports (135, etc.) as they have vulnerabilities up the wazoo.
Name:
Anonymous2010-02-09 0:23
Depends. What kind of "router" are you talking about? A Catalyst 6500? A Soekris box?
ICMP packets are not a big threat per se, but I still drop them unless they come from certain addresses.
Port forwarding should ONLY be done internally, and never on the cloud (forward ports ON 192.168/16 TO 192.168/16 only).
The Mbt are popular with both recreation and sportswear, Mbt shoes are simply matchless in terms of style, comfort and longevity, The Mbt sale Now! Free Shipping! NO Tax! http://www.mbt-antishoes.net