Re: DROP Protocols

From: Mike Rosado [MSFT] (mikeros_at_online.microsoft.com)
Date: 09/23/04 

Date: Thu, 23 Sep 2004 16:56:23 -0500

Hola Ricardo,

I'm by no means an expert in this subject matter of ICMP nor TCP/IP, but
I'll try to assist you to the best of my ability. As I understand it, you
should be able to do TCP/IP Filtering as documented in the following article
similar to Windows 2003:

816792 HOW TO: Configure TCP/IP Filtering in Windows 2003
http://support.microsoft.com/?id=816792

Or according to the following article, use like a Router or Firewall to do
the function for you:

325122 Internet Control Message Protocol "Destination Unreachable" (Code =
http://support.microsoft.com/?id=325122

The code value of the ICMP Destination Unreachable packet is 0x0D. The
hexadecimal code 0X0D (code decimal 13) translates to "Communication
Administratively Prohibited" from Requests for Comments (RFC) 1812:

    13 = Communication Administratively Prohibited - generated if a
         router cannot forward a packet due to administrative filtering;

This is generated if a router cannot forward a packet because of
administrative filtering. This is the code value for an administrative
denial, which indicates that a router is filtering a port and is not
permitting traffic to pass. The packet is typically seen when traffic is
refused to pass through a router or a firewall. 

-- 
Hope this helps,
Mike Rosado
Windows 2000 MCSE + MCDBA
Microsoft Enterprise Platform Support
Windows NT/2000/2003 Cluster Technologies
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
<http://www.microsoft.com/info/cpyright.htm>
-----Original Message-----
"Ricardo" <Ricardo@discussions.microsoft.com> wrote in message
news:0227AB2B-CCF3-4493-B747-1D9A38FD2964@microsoft.com...
> How can I configure the NIC of my W2K Server to drop ICMP packets ???

Relevant Pages

  • Re: Strange MTU Problem
    ... Does the router know how to forward the ICMP ... On the local side, a packet has real source address and destination, ...
    (comp.os.linux.networking)
  • Re: Interesting fw log: "ICMP type 3 not embeddable"
    ... I've seen ICMP type 3 embedded TCP or UDP datagram but never seen ICMP ... REJECT incoming ICMP 3 packet) or is using ICMP mis-implementation OS ... is running BSD code based some router. ...
    (comp.os.linux.security)
  • Re: Interesting fw log: "ICMP type 3 not embeddable"
    ... I've seen ICMP type 3 embedded TCP or UDP datagram but never seen ICMP ... REJECT incoming ICMP 3 packet) or is using ICMP mis-implementation OS ... is running BSD code based some router. ...
    (comp.os.linux.security)
  • Re: Traceroutes to Cisco Routers
    ... then it will response with a ICMP "udp port unreacheable" ... answer for the previous udp packet, the source IP address of this packet will be ... so the router will use the destination IP adress in the ... Performing the trace with udp packets, ...
    (Pen-Test)
  • Re: unexpected ICMP host unreachable - no worries?
    ... an attack?". ... You observed ICMP backscatter traffic. ... I'm guessing this packet is remote controlling command to distributed ... easily relate that outgoing scan or outbound flood packets after detect ...
    (comp.os.linux.security)
Loading