3cx and ICMP Tenable - ICMP Timestamp Request Remote Date Disclosure

[maindriver]

Tenable is flagging ICMP on our self hosted 3cx install.

Since it's the Debian 3cx version, I don't want to fiddle with firewall etc without checking here first at least.

Is this something that can be added in to a future 3cx release?

https://www.tenable.com/plugins/nessus/10114



https://retest.dk/vulnerabilities-b...Request Remote,queries, such as ping commands


https://medium.com/@rahulwadekar969...mestamp-vulnerabilities-in-linux-ce5eeb61922a


Thanks

 

[Alphabetic]

Self hosted?

sudo nano /etc/sysctl.conf

Add line: net.ipv4.icmp_echo_ignore_all=1


sudo sysctl -p --load /etc/sysctl.conf

 

[maindriver]

That's too aggressive, don't want to disable ping altogether.

I've tried this, will see if it works..

iptables -I INPUT -p icmp --icmp-type timestamp-request -j DROP
iptables -I OUTPUT -p icmp --icmp-type timestamp-reply -j DROP

iptables-save > /etc/iptables/rules.v4