All -
Is there something wrong with blocking all inbound icmp?
On my inbound accesslist I allow icmp to the perimeter router "outside"
interfaces, and block icmp to any other address. Am I doing something
outside of "best practices"?? Note I am not referring to my firewall, this
is about the perimeter router configuration.
I am wondering what others do.

Bud Venne
WAN/LAN Specialist
Onyx Acceptance
(949) 465-3775


-----Original Message Header-----
From: Chris Keladis [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 30, 2000 3:29 PM
To: Enno Rey
Cc: Greg Skafte; Daniel Crichton; [EMAIL PROTECTED]
Subject: Re: List of "safe" ICMP types and codes

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to