Trace Route Security risk"traceroute"

ITEM: RS4000018039



Q:                                                                              
Topic thread:                                                                   
AIX Family Software/RISC Hardware (IX)                                          
 RISCSYSTEM SOFTWARE                                                            
  COMMUNICATIONS                                                                
   CHECKPOINT FIREWALL                                                          
    IX RISCCOM                                                                  
                                                                                
Problem:                                                                        
  Customer is testing his firewall with help of a software called               
  ISS. This testing software generates a report showing all de-                 
  tected possible security "holes".                                             
  The report references the "traceroute" as a low risk security                 
  issue.                                                                        
Question:                                                                      
  Is it possible to disable the "traceroute response" function                  
  in the AIX 4.1 or 4.2 environment?                                            
A:                                                                              
                                                                                
In order to disable traceroute, you may wish to change the permissions          
on /usr/bin/traceroute.  The following command will disable traceroute:         
                                                                                
chmod 400 /usr/bin/traceroute                                                   
                                                                                
Thank you for using AIX Technical Support Service.                              
                                                                                
                                                                                
                                                                                
wrm aix                                                                         
                                                                               


WWQA: ITEM: RS4000018039 ITEM: RS4000018039
Dated: 12/1997 Category: AIXOPSUP
This HTML file was generated 99/06/24~12:43:07
Comments or suggestions? Contact us