Solved

icmp ,snmp

Posted on 2009-04-01
2
778 Views
Last Modified: 2012-05-06
Hi,

Can any one explain me the ports numbers used for icmp both for echo request and reply

Any standard piece of code for blocking echo request and echo reply ;please help with the code for both router and pix;

Please help with the port for snmp also

thx
0
Comment
Question by:phoenix26
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 24048858
Here is a good reference for ICMP type messages:

http://www.iana.org/assignments/icmp-parameters

To block ICMP echo and echo reply (inbound I assume):

Router:

access-list 150 deny icmp any any echo
access-list 150 deny icmp any any echo-reply
access-list 150 permit ip any any    <--add if you are allowing everything by default

int <wan interface>
ip access-group 150 in

PIX:

access-list outside_access_in extended deny icmp any any echo
access-list outside_access_in extended deny icmp any any echo-reply
access-group outside_access_in in interface outside


SNMP polling uses UDP 161
SNMP Traps use UDP 162
0
 

Author Closing Comment

by:phoenix26
ID: 31565653
Excellent feedback Thanks a lot
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question