Hi,
I am using NAT (Network Address Translation) on a router running Debian
Linux. Outgoing ICMP TTL exceeded packets (type 11) with a bogus
checksum in the ICMP header are not blocked by this router.
My OpenWRT router, however, blocks outgoing ICMP TTL exceeded messages
with a bogus ICMP checksum.
Debian and OpenWRT both use netfilter/iptables for NAT and packet
filtering. How can one tell netfilter to filter bogus ICMP packets or
not? Is there a configuration option? Which is the standard behavior?
Regards
Florian Wohlfart
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
