On Mon, 03 Jul 2000 23:12:31 +0100 (BST), Alan Cox wrote: >> > Personally I suggest allowing the following ICMP types: >> > 0 Echo Reply >> > 3 Destination Unreachable >> > 11 Time Exceeded >> > 12 Parameter Problem > >0 is optional but useful, 11 can be used for certain kinds of DoS attack >against some hosts. Does that mean you would suggest to drop 11? Or would I break things (apart from DoS attacks, of course ;-) if I'de filter 11? Thanks, Ralf -- Sign the EU petition against SPAM: L I N U X .~. http://www.politik-digital.de/spam/ The Choice /V\ of a GNU /( )\ Generation ^^-^^ - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.rutgers.edu
