Re: [Sheflug] Demon Internet blocking ICMP (was: (no subject))

["Mark Broadbent" <markb [at] xxxxxxxxxxxxxx>]

> > what i ,meant to say was that demon and bt block all icmp traffic on
there=
> >  network, and as such ping wont work, you need to use the tracepath
command=
> >  from within  the sbin directory, as this uses udp
> >
>
> *blink*
>
> They do?? They didn't used to (at least, 12 months ago they didn't, last
> time I had any dealings with Demon at least; BT I've never used, but their
> bankbone's allow ICMP though from what I've seen).
>
> Seems inherently stupid to me. Anyone want to hazrd why, as I can't think
> of any sane reason...

>From Demon Announce list with reference to the recent blaster and welchia
worms...

"...
The effect of these two worms has been a significant increase in
Internet traffic targeting vulnerable systems. Of greatest concern
is the ICMP traffic created by the Welchia worm which by its nature
is causing problems with routers across the Internet worldwide.

As a result we are now blocking traffic associated with the worm
(ICMP 8 - Echo) at our borders to prevent this traffic disrupting
our equipment and services. This blocking will be reviewed over the
coming days and removed as soon as we believe we can do so without
causing adverse impact on our customers and services.
..."

Obviously haven't re-enabled it yet...

Cheers
Mark


___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.