Ping blocking Was: TCP timestamp vulnerability -- any insights on how this relates to Midrange boxes?

<snip>
It is. To me, the "risk" is exaggerated by those tin foil hats also blocking ICMP echo requests (ping) "because of security" — and making my life as a network admin a misery, because I can't easily diagnose if a host is basically up.
</snip>

I too find that so frustrating. We have that hear. And our network guy definitely qualifies as a tinfoil hat.
- Keeps his company required smart phone in a lead lined box when not in use for 2FA so he can't be tracked.
- Has stockpiles of food and other stuff cached here and there.
- Drives older cars without tracking computers (has a fleet).
- etc

I tried to convince him that if nra.org allows pings then it must be safe because I'm sure that left wing terrorists would have surely trashed that site by now.
I think he only used that info to set up an infinite loop to know when to grab his guns and head for the woods.

Rob Berendt