Defenses against Network Mapping

¨Block incoming ICMP messages at Internet gateway to make ping ineffective ¨Filter ICMP Time Exceeded messages leaving your network to make traceroute ineffective