Several Web sites block ICMP traffic due to DDoS attacks. Why does Yahoo still allow PING and TRACERT?
CNN, Microsoft, Ebay, and Yahoo all experienced DDoS attacks, but Yahoo is the only one that still allows ICMP traffic. I was curious as to why.
CNN, Microsoft, Ebay, and Yahoo all experienced DDoS attacks, but Yahoo is the only one that still allows ICMP traffic. I was curious as to why.
It could have something to do with MTU discovery which requires ICMP traffic. Or it could just be that they understand ICMP attacks are largely a thing of the past. If you have half a brain and you want to take down a service, you attack the server, not the network. That’s what’s currently happening with http://www.irib.ir. It will reply to a ping just fine, but a few unorganized people are simulating tons of concurrent HTTP users.
Other notable servers that reply to echo requests include whitehouse.gov and google.com. As for tracerouting, Yahoo does not allow tracerouting of its private network so that’s nothing special.