Bug 106062

Summary:	Firewall configuration allows ping replies
Product:	[openSUSE] SUSE LINUX 10.0	Reporter:	IOANNIS MANOLOUDIS <im33>
Component:	Security	Assignee:	Security Team bot <security-team>
Status:	RESOLVED INVALID	QA Contact:	E-mail List <qa-bugs>
Severity:	Major
Priority:	P5 - None
Version:	unspecified
Target Milestone:	---
Hardware:	32bit
OS:	SuSE Pro 9.3
Whiteboard:
Found By:	System Test	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description IOANNIS MANOLOUDIS 2005-08-21 21:30:16 UTC

Hello. 
I have configured the firewall through Yast. I don't allow any services and I 
checked the "Protect from internal network" option. 
I tested the firewall using the "shields up" service in www.grc.com. The test 
failed. Although the test showed that no solicited or unsolicited TCP packets 
were received, my computer replied to their ICMP Ping request, thus making me 
visible online. 
Does this happen only to me? 
Ioannis

Comment 1 Ludwig Nussel 2005-08-22 07:18:05 UTC

SuSEfirewall2 will not block ICMP echo by default.