On Mon, 03 Jul 2000 23:12:31 +0100 (BST), Alan Cox wrote:
>> > Personally I suggest allowing the following ICMP types:
>> > 0 Echo Reply
>> > 3 Destination Unreachable
>> > 11 Time Exceeded
>> > 12 Parameter Problem
>
>0 is optional but useful, 11 can be used for certain kinds of DoS attack
>against some hosts.
Does that mean you would suggest to drop 11? Or would I break things (apart
from DoS attacks, of course ;-) if I'de filter 11?
Thanks,
Ralf
--
Sign the EU petition against SPAM: L I N U X .~.
http://www.politik-digital.de/spam/ The Choice /V\
of a GNU /( )\
Generation ^^-^^
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
