Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Blocking ICMP requests

Status
Not open for further replies.

DanielUK

IS-IT--Management
Joined
Jul 22, 2003
Messages
343
Location
GB
How do I block ping requests coming into my 801 router?

I've tried

access-list 101 deny icmp any any echo

and

access-list 101 deny icmp any any echo

and applied it to inbound on BRI0 (which, as I see it, is the nearest to the source), but GRC.com's ShieldsUP is still reporting that the router is replying to pings. My access list from running-config looks like:

Code:
map-class dialer DialClass
access-list 18 permit 192.168.0.0 0.0.0.255
access-list 23 permit 192.168.0.0 0.0.0.255
access-list 101 deny   icmp any any echo
access-list 101 deny   icmp any any echo-reply
access-list 121 deny   udp any eq netbios-dgm any
access-list 121 deny   udp any eq netbios-ns any
access-list 121 deny   udp any eq netbios-ss any
access-list 121 deny   tcp any eq 137 any
access-list 121 deny   tcp any eq 138 any
access-list 121 deny   tcp any eq 139 any
access-list 121 permit ip any any time-range TIME
access-list 121 deny   tcp any any eq telnet
access-list 121 deny   tcp any eq [URL unfurl="true"]www any[/URL]
dialer-list 1 protocol ip permit

Any ideas?

Also, GRC website is claiming that I'm receiving solicited tcp packets which it says is a bad thing...again, not sure how to stop this happening.

Thanks

Dan
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top