Depends on your network and weather or not you care to be rfc compliant. I see real fragmented traffic all the time. I choose not to block it. Because it would break stuff that our customers need to use. So i just keep an eye on fragmentation and watch fro abuse of it. We host 125,000 web sites, and use iptables on our Firewalls (8). On Sunday 30 March 2003 15:06, Peteris Krumins wrote: > Hi, > > How often does IP Fragmentation occur? > Is it safe to restrict any fragmented packets to 'come' into my > network? > > > P.Krumins -- Daniel Fairchild - Chief Security Engineer | danielf@xxxxxxxxxxxxxxx
