>> one case that comes to mind is PMTU. I've seen first hand instances where a corporation blocked all ICMP traffic, and then some of my users couldn't access that companies website. For whatever reason, the remote web server had a smaller than normal MTU size <<
Yes - ICMP should be blocked selectively. PING clearly is nice to have for support/diagnostic - it is NOT needed for regular operation. If Declude wants to make sure that the connection to their DNS server works - then they should test the connection to a DNS port. Those ports ARE open. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.