<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0" xmlns:blogChannel="http://backend.userland.com/blogChannelModule">

<channel>
<title>stealth issue (fake them) in Security</title>
<link>http://www.dslreports.com/forum/r21077925</link>
<description></description>
<language>en</language>
<pubDate>Tue, 15 Dec 2009 04:24:41 EDT</pubDate>
<lastBuildDate>Tue, 15 Dec 2009 04:24:41 EDT</lastBuildDate>

<item>
<title>Re: stealth issue (fake them)</title>
<link>http://www.dslreports.com/forum/remark,21078805</link>
<description><![CDATA[<A HREF="/useremail/u/825971"><b>kpatz</b></A> : It depends on the inbound gateway (router) in use at the destination host.  Some may return the ICMP unreachable message if a host doesn't respond to ARP requests (meaning it's turned off), and a "stealthed" machine behind the same router would not cause the unreachable message, because the machine would reply to ARP, but drop the TCP/UDP/ICMP packets at the firewall.  But many routers don't send the unreachable message for ARP non-replies, so stealth does "work" in this case.<br><small>--<br>The "duh" is the basic unit of measurement of human stupidity. While one may try to measure stupidity in megaduhs(10^6) or gigaduhs(10^9), larger units such as exaduhs(10^18) or yottaduhs(10^24) are more appropriate for measuring on a global level.</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,21078805</guid>
<pubDate>Mon, 08 Sep 2008 21:20:07 EDT</pubDate>
</item>

<item>
<title>Re: stealth issue (fake them)</title>
<link>http://www.dslreports.com/forum/remark,21078046</link>
<description><![CDATA[<A HREF="/useremail/u/1070900"><b>nwrickert</b></A> : I am not convinced that the analysis is correct.<br><br>If I attempt to ping another host on the same subnet, and that host is down, then the ping fails.  On linux I will see "Host Unreachable".  But if I am using solaris, I will see "connection timed out".  I don't think I have ever seen "host unreachable" in these circumstances, except when running linux.  The cisco routers at work do not give "host unreachable" when the host (on a lan connected to that router) is down.<br><small>--<br>AT&T dsl; Westell 327w modem/router; openSuSE 11.0; firefox 3.0.1</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,21078046</guid>
<pubDate>Mon, 08 Sep 2008 19:00:18 EDT</pubDate>
</item>

<item>
<title>stealth issue (fake them)</title>
<link>http://www.dslreports.com/forum/remark,21077925</link>
<description><![CDATA[<A HREF="/useremail/u/595148"><b>aefstoggaflm</b></A> : I saw the webpage at &raquo;<A HREF="http://www.hansenonline.net/Networking/stealth.html" >www.hansenonline.net/Networking/stealth.html</A><br><br> <blockquote><small>quote:</small><hr>The lack of this "host unreachable" message is a clear indication that something is there and it's dropping the packets rather than replying to them.<br><hr></blockquote><br><br>and that has got me thinking..<br><br>Is there any way to send "host unreachable" message back to them, even when my computer is turned on - To fake them into thinking that my computer is really off (or does not exist)..<br><br>..When using Software firewall and or using a router?<br><br>Please and thank you. :)<br><small>--<br>Please use the "yellow (IM) envelope" to contact me and please leave the URL intact.</small>]]></description>
<guid isPermaLink="true">http://www.dslreports.com/forum/remark,21077925</guid>
<pubDate>Mon, 08 Sep 2008 18:31:10 EDT</pubDate>
</item>

</channel>
</rss>
