[AusNOG] icmp best practise

[David Hughes]

If you are looking for implementation guidance have a look at the link below.  These guys have been helping us all run more secure routers and networks for many, many years.  

	http://www.team-cymru.org/templates.html



Thanks

David
...


On 23/11/2015, at 1:49 PM, Alex Samad - Yieldbroker <Alex.Samad at yieldbroker.com> wrote:

> Hi
> 
> Okay I found this
> https://tools.ietf.org/html/draft-ietf-opsec-icmp-filtering-04 
> from here
> https://svn.tools.ietf.org/area/ops/trac/wiki/TIG_DIAGNOSTICS
> which found from here
> https://tools.ietf.org/html/rfc7279
> 
> 
> in the top   document there is a table which covers icmp
> 
> " A bunch of very smart op sec guys with heaps of credibility and history within the industry.  Have a google about them and Rob Thomas."
> 
> Okay 
> 
> A
> 
> 
> -----Original Message-----
> From: David Hughes [mailto:david at hughes.com.au] 
> Sent: Monday, 23 November 2015 2:47 PM
> To: Alex Samad - Yieldbroker <Alex.Samad at yieldbroker.com>
> Cc: ausnog at lists.ausnog.net
> Subject: Re: [AusNOG] icmp best practise
> 
> 
> A bunch of very smart op sec guys with heaps of credibility and history within the industry.  Have a google about them and Rob Thomas.
> 
> 
> 
> Thanks
> 
> David
> ...
> 
> 
> On 23/11/2015, at 1:27 PM, Alex Samad - Yieldbroker <Alex.Samad at yieldbroker.com>
> wrote:
> 
>> Ta, but who are cymru ... never heard of them before.
>> 
>> 
>> Alex
>> 
>> -----Original Message-----
>> From: David Hughes [mailto:david at hughes.com.au] 
>> Sent: Monday, 23 November 2015 2:15 PM
>> To: Alex Samad - Yieldbroker <Alex.Samad at yieldbroker.com>
>> Cc: ausnog at lists.ausnog.net
>> Subject: Re: [AusNOG] icmp best practise
>> 
>> 
>> Hi
>> 
>> Not sure APNIC is the starting point for this.  Team Cymru could be a good first point of reference.
>> 
>> 	https://www.cymru.com/Documents/icmp-messages.html
>> 
>> 
>> 
>> Thanks
>> 
>> David
>> ...
>> 
>> 
>> On 23/11/2015, at 1:10 PM, Alex Samad - Yieldbroker <Alex.Samad at yieldbroker.com> wrote:
>> 
>>> Hi
>>> 
>>> Is there a APNIC or some australian body best practise for ICMP configuraiton on internet facing routers.
>>> 
>>> Alex
>>> _______________________________________________
>>> AusNOG mailing list
>>> AusNOG at lists.ausnog.net
>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>> 
>