G
Guest
How can I configure the NIC of my W2K Server to drop ICMP packets ???
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
M
Mike Rosado [MSFT]
Hola Ricardo,
I'm by no means an expert in this subject matter of ICMP nor TCP/IP, but
I'll try to assist you to the best of my ability. As I understand it, you
should be able to do TCP/IP Filtering as documented in the following article
similar to Windows 2003:
816792 HOW TO: Configure TCP/IP Filtering in Windows 2003
http://support.microsoft.com/?id=816792
Or according to the following article, use like a Router or Firewall to do
the function for you:
325122 Internet Control Message Protocol "Destination Unreachable" (Code =
http://support.microsoft.com/?id=325122
The code value of the ICMP Destination Unreachable packet is 0x0D. The
hexadecimal code 0X0D (code decimal 13) translates to "Communication
Administratively Prohibited" from Requests for Comments (RFC) 1812:
13 = Communication Administratively Prohibited - generated if a
router cannot forward a packet due to administrative filtering;
This is generated if a router cannot forward a packet because of
administrative filtering. This is the code value for an administrative
denial, which indicates that a router is filtering a port and is not
permitting traffic to pass. The packet is typically seen when traffic is
refused to pass through a router or a firewall.
--
Hope this helps,
Mike Rosado
Windows 2000 MCSE + MCDBA
Microsoft Enterprise Platform Support
Windows NT/2000/2003 Cluster Technologies
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
<http://www.microsoft.com/info/cpyright.htm>
-----Original Message-----
I'm by no means an expert in this subject matter of ICMP nor TCP/IP, but
I'll try to assist you to the best of my ability. As I understand it, you
should be able to do TCP/IP Filtering as documented in the following article
similar to Windows 2003:
816792 HOW TO: Configure TCP/IP Filtering in Windows 2003
http://support.microsoft.com/?id=816792
Or according to the following article, use like a Router or Firewall to do
the function for you:
325122 Internet Control Message Protocol "Destination Unreachable" (Code =
http://support.microsoft.com/?id=325122
The code value of the ICMP Destination Unreachable packet is 0x0D. The
hexadecimal code 0X0D (code decimal 13) translates to "Communication
Administratively Prohibited" from Requests for Comments (RFC) 1812:
13 = Communication Administratively Prohibited - generated if a
router cannot forward a packet due to administrative filtering;
This is generated if a router cannot forward a packet because of
administrative filtering. This is the code value for an administrative
denial, which indicates that a router is filtering a port and is not
permitting traffic to pass. The packet is typically seen when traffic is
refused to pass through a router or a firewall.
--
Hope this helps,
Mike Rosado
Windows 2000 MCSE + MCDBA
Microsoft Enterprise Platform Support
Windows NT/2000/2003 Cluster Technologies
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
<http://www.microsoft.com/info/cpyright.htm>
-----Original Message-----
G
Guest
I want to prevent clients computers in the network to ping my server, and
avoid internal attacks on it.
avoid internal attacks on it.