Hacker News new | ask | show | jobs
by teddyh 661 days ago
“ping” is ICMP ECHO_REQUEST and ICMP ECHO_RESPONSE. Traceroute uses ICMP TIME_EXCEEDED. So blocking only “ping” will not affect traceroute. And if you block all ICMP, you break your own internet: <http://shouldiblockicmp.com/>
1 comments

The number of companies that I've encountered that wholesale block ICMP because "security" is painfully high.