Kerio configuration help needed

Discussion in 'Windows Desktop Systems' started by muzikool, Sep 18, 2003.

  1. muzikool

    muzikool Act your wage. Political User

    I just installed KPF last night, and when I checked the log today, I was receiving the following every 20-30 seconds: "ICMP PING CyberKit 2.2 Windows." I did some looking around and found some information, the most helpful of which can be found here. The corrective action that it suggests is to "block inbound ICMP echo requests." Since I'm a Kerio newbie, I don't know how to do this, so I'm asking for help with it.

    Also, to temporarily solve the problem, I blocked the low priority intrusions on the Intrusions window. Since I did that, all inbound ICMP PINGs have been dropped. Is there a good reason to permit these low priority intrusions? I obviously don't have advanced skills with the IDS at this point, so any helpful info would be greatly appreciated. Thanks! :D
  2. Enyo

    Enyo Moderator

    Drop them :) Your seeing ICMP ping mainly due to the worms around that ping hosts to find live ones and the infect them.

    ICMP echo is blocked by default I believe on the predefined tab of the network section (off the top of my head)
  3. muzikool

    muzikool Act your wage. Political User

    Thanks Enyo. I had a feeling you would have an answer for me. :)