Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Jun 2001 12:49:31 -0230
From:      Graham Rose <graham@avint.net>
To:        <freebsd-security@freebsd.org>
Subject:   RE: disable traceroute to my host
Message-ID:  <01062712515103.10969@hercules.avint.net>
In-Reply-To: <NFBBKAEAALGGGFKINBLAMEFMCAAA.peter@sysadmin-inc.com>
References:  <NFBBKAEAALGGGFKINBLAMEFMCAAA.peter@sysadmin-inc.com>

next in thread | previous in thread | raw e-mail | index | archive | help

http://www.isi.edu/in-notes/iana/assignments/icmp-parameters

www.iana.org


On Wed, 27 Jun 2001, Peter Brezny wrote:
> Peter,
> 
> What is a good document to get more info on ICMP types?
> 
> Thanks.
> 
> Peter Brezny
> SysAdmin Services Inc. 
> 
> -----Original Message-----
> From: owner-freebsd-security@FreeBSD.ORG
> [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Peter Jeremy
> Sent: Tuesday, June 26, 2001 5:15 PM
> To: 3APA3A
> Cc: alexus; freebsd-security@FreeBSD.ORG
> Subject: Re: disable traceroute to my host
> 
> 
> On 2001-Jun-26 15:08:13 +0400, 3APA3A <3APA3A@SECURITY.NNOV.RU> wrote:
> >deny ICMP from (YOURNETWORK) to any icmptypes 0,3,11 out
> >
> >0 - to stop windows traceroute and ping
> >3 - to stop BSD-style traceroute
> >11 - to prevent intermediate router to reply traceroute
> 
> Blocking ICMP type 3 will break Path-MTU discovery (which relies on
> type 3 code 4).
> 
> Peter
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01062712515103.10969>