Solved

icmp ,snmp

Posted on 2009-04-01
2
770 Views
Last Modified: 2012-05-06
Hi,

Can any one explain me the ports numbers used for icmp both for echo request and reply

Any standard piece of code for blocking echo request and echo reply ;please help with the code for both router and pix;

Please help with the port for snmp also

thx
0
Comment
Question by:phoenix26
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 24048858
Here is a good reference for ICMP type messages:

http://www.iana.org/assignments/icmp-parameters

To block ICMP echo and echo reply (inbound I assume):

Router:

access-list 150 deny icmp any any echo
access-list 150 deny icmp any any echo-reply
access-list 150 permit ip any any    <--add if you are allowing everything by default

int <wan interface>
ip access-group 150 in

PIX:

access-list outside_access_in extended deny icmp any any echo
access-list outside_access_in extended deny icmp any any echo-reply
access-group outside_access_in in interface outside


SNMP polling uses UDP 161
SNMP Traps use UDP 162
0
 

Author Closing Comment

by:phoenix26
ID: 31565653
Excellent feedback Thanks a lot
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now