Solution for ICMP timestamp response in VAPT report
 

There was a vulnerability test run on our developmental server having Red Hat Enterprise Linux Server release 5.11 (Tikanga) as the OS. There is one point among others of concern here; it is to do with ICMP timestamp response. The solution suggested is:

ipchains -A input -p icmp --icmp-type timestamp-request -j DROP
ipchains -A output -p icmp --icmp-type timestamp-reply -j DROP

When I gave the command,

ipchains -A input -p icmp --icmp-type timestamp-request -j DROP

it gave the message as below

-bash: ipchains: command not found

Please suggest how to go about it.

Please revert with the reply to my query.

Regards

Again, you do not provide relevant details, and the answer to your question should be VERY obvious to someone who has a 'certification'. You don't tell us what 'vulnerability test' was performed, or where you got the suggested 'solution' to that problem, but the answer is very obvious:

• The ipchains command isn't in your path...so find the ipchains command, and specify the full path to the executable.
• Your 'solution' is VERY old, and references the ipchains command, where iptables is used currently.

Not sure what that command is actually supposed to accomplish, since it sure won't make your box more 'secure'. Especially since you've said before you're running them unsupported.

Thanks for your answer but RHEL support from Red Hat is not mandatory to run RHEL.

Regards

Yes, it is. You get 30 days free...after that you need to pay to continue to get support/patches/updates. And didn't you say before that you WERE paying for RHEL? So which is it? Also, you are STILL running a very old version of RHEL, and should update it, as has been told to you before.

And the answer given had NOTHING to do with RHEL support, did it? It involved checking the path and command. Re-read the first reply.

Sorry, this reply of mine was for your reply to the other question of mine.

ipchains command is replaced with iptables, the command worked with iptables.

Regards

Right...which could have easily been found with a small bit of research.

And you STILL ignore the fact that you are running RHEL, yet don't try to check the knowledgebase, which you are PAYING FOR ACCESS TO, with your L3 subscription. You don't even acknowledge that, and again, if you have an Red Hat 'certification', should't IPtables and basic security be part of what you learned?