98 The ABCs of TCP/IP
they support. Because some ICMP messages can be quite helpful, this author
believes their utility needs to be weighed against their vulnerability to deter-
mine if such messages should be allowed to flow through firewalls and routers
rather than simply blocking all ICMP messages.
Later in this book when examining router access lists in detail, we will
note that it is possible to allow only Echo Reply messages from the Internet
to our hosts. Thus, certain types of access lists can be used to block Pinging
from the Internet while allowing employees to determine if certain hosts on
the Internet are reachable.
.
AU1463/Frame/ch4 Page 98 Tuesday, September 10, 2002 9:35 AM