Several Web sites block ICMP traffic due to DDoS attacks. Why does Yahoo still allow PING and TRACERT?

CNN, Microsoft, Ebay, and Yahoo all experienced DDoS attacks, but Yahoo is the only one that still allows ICMP traffic. I was curious as to why.

Share this information...
  • Print this article!
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • E-mail this story to a friend!
  • FriendFeed
  • MSN Reporter
  • MySpace
  • StumbleUpon
  • Twitter
  • Yahoo! Bookmarks

One Response to “Several Web sites block ICMP traffic due to DDoS attacks. Why does Yahoo still allow PING and TRACERT?”

  • cypheron says:

    It could have something to do with MTU discovery which requires ICMP traffic. Or it could just be that they understand ICMP attacks are largely a thing of the past. If you have half a brain and you want to take down a service, you attack the server, not the network. That’s what’s currently happening with http://www.irib.ir. It will reply to a ping just fine, but a few unorganized people are simulating tons of concurrent HTTP users.

    Other notable servers that reply to echo requests include whitehouse.gov and google.com. As for tracerouting, Yahoo does not allow tracerouting of its private network so that’s nothing special.

Leave a Reply

Security Code:

Free Consultation: 086 8518337

LET US HELP YOU TO WWWIN…
Categories