DROP Protocols

[ricardo]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

How can I configure the NIC of my W2K Server to drop ICMP packets ???

 

[Guest]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

Hola Ricardo,

I'm by no means an expert in this subject matter of ICMP nor TCP/IP, but
I'll try to assist you to the best of my ability. As I understand it, you
should be able to do TCP/IP Filtering as documented in the following article
similar to Windows 2003:

816792 HOW TO: Configure TCP/IP Filtering in Windows 2003
http://support.microsoft.com/?id=816792

Or according to the following article, use like a Router or Firewall to do
the function for you:

325122 Internet Control Message Protocol "Destination Unreachable" (Code =
http://support.microsoft.com/?id=325122

The code value of the ICMP Destination Unreachable packet is 0x0D. The
hexadecimal code 0X0D (code decimal 13) translates to "Communication
Administratively Prohibited" from Requests for Comments (RFC) 1812:

13 = Communication Administratively Prohibited - generated if a
router cannot forward a packet due to administrative filtering;

This is generated if a router cannot forward a packet because of
administrative filtering. This is the code value for an administrative
denial, which indicates that a router is filtering a port and is not
permitting traffic to pass. The packet is typically seen when traffic is
refused to pass through a router or a firewall.

--
Hope this helps,
Mike Rosado
Windows 2000 MCSE + MCDBA
Microsoft Enterprise Platform Support
Windows NT/2000/2003 Cluster Technologies

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
<http://www.microsoft.com/info/cpyright.htm>

-----Original Message-----

"Ricardo" <Ricardo@discussions.microsoft.com> wrote in message
news:0227AB2B-CCF3-4493-B747-1D9A38FD2964@microsoft.com...
> How can I configure the NIC of my W2K Server to drop ICMP packets ???

 

[ricardo]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

I want to prevent clients computers in the network to ping my server, and
avoid internal attacks on it.

"Mike Rosado [MSFT]" wrote:

> Hola Ricardo,
>
> I'm by no means an expert in this subject matter of ICMP nor TCP/IP, but
> I'll try to assist you to the best of my ability. As I understand it, you
> should be able to do TCP/IP Filtering as documented in the following article
> similar to Windows 2003:
>
> 816792 HOW TO: Configure TCP/IP Filtering in Windows 2003
> http://support.microsoft.com/?id=816792
>
> Or according to the following article, use like a Router or Firewall to do
> the function for you:
>
> 325122 Internet Control Message Protocol "Destination Unreachable" (Code =
> http://support.microsoft.com/?id=325122
>
> The code value of the ICMP Destination Unreachable packet is 0x0D. The
> hexadecimal code 0X0D (code decimal 13) translates to "Communication
> Administratively Prohibited" from Requests for Comments (RFC) 1812:
>
> 13 = Communication Administratively Prohibited - generated if a
> router cannot forward a packet due to administrative filtering;
>
> This is generated if a router cannot forward a packet because of
> administrative filtering. This is the code value for an administrative
> denial, which indicates that a router is filtering a port and is not
> permitting traffic to pass. The packet is typically seen when traffic is
> refused to pass through a router or a firewall.
>
> --
> Hope this helps,
> Mike Rosado
> Windows 2000 MCSE + MCDBA
> Microsoft Enterprise Platform Support
> Windows NT/2000/2003 Cluster Technologies
>
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
> <http://www.microsoft.com/info/cpyright.htm>
>
> -----Original Message-----
>
> "Ricardo" <Ricardo@discussions.microsoft.com> wrote in message
> news:0227AB2B-CCF3-4493-B747-1D9A38FD2964@microsoft.com...
> > How can I configure the NIC of my W2K Server to drop ICMP packets ???
>
>
>