I agree, I deny all ICMP except those you mention and ttl-exceeded and
source-quench.
On Thu, 15 Jun 2000, Varnam, Gary wrote:
> I would barr ICMP apart destination unreachable and packets too large. A
> chap I think he called Lance on this group as written a paper about this. If
> I find the url again I will pass it to the list.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================