Article ID: 6384, created on May 28, 2009, last review on May 8, 2014

  • Applies to:
  • H-Sphere

Symptoms

Security scan on Parallels H-Sphere control panel gives the following vulnerability:

ICMP TimeStamp Request 

That may course customers can not pass PCI (payment card industry) compliant.

Resolution

Customer (or datacenter service provider) should filter out:

- the ICMP timestamp requests (ICMP type 13);

- the outgoing ICMP timestamp replies (ICMP type 14);

- the address mask request (ICMP type 17);

- the address mask reply (ICMP type 18).

 

Filtering can be done:

- on routers side (for example with 'access-list' command);

- on Parallels H-Sphere control Panel box with 'iptables'/'ipchains' tools.

f213b9fa8759d57bee5d547445806fe7 6311ae17c1ee52b36e68aaf4ad066387

Email subscription for changes to this article
Save as PDF