Re: List of "safe" ICMP types and codes

[Nancy Davis]

> ]> Is there something wrong with blocking all inbound icmp?
> ]
> ]Yes, your network connectivity will greatly suffer. Performance Problems
> ]from failed Path MTU discovery and inability to debug connectivity problems.

I disagree.  You can  open a single host for network
checking with ping and traceroute, but you certainly
do not need to let your entire network be vulnerable
to ICMP probing.

Nancy Davis
> 
> here is an url for a description of such troubles;
> http://www.worldgate.ca/~marcs/mtu/
> 
> Olivier
> 
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> 

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]