Mitigation
Although the only way to prevent this type of tunneling is to block ICMP traffic altogether, this is not realistic for a production or real-world environment. One method for mitigation of this type of attack is to only allow fixed sized ICMP packets through firewalls to virtually eliminate this type of behavior.
Read more about this topic: ICMP Tunnel
Famous quotes containing the word mitigation:
“Law is a thing which is insensible, and inexorable, more beneficial and more profitious to the weak than to the strong; it admits of no mitigation nor pardon, once you have overstepped its limits.”
—Titus Livius (Livy)