Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Sep 1999 09:40:35 +0200 (cest)
From:      Henk van Oers <hvoers@anp.nl>
To:        Brian Tan <brian@sys.com.sg>
Cc:        "Rodney W. Grimes" <rgrimes@gndrsh.dnsmgr.net>, freebsd-ipfw@FreeBSD.ORG
Subject:   Re: what is 'ICMP:3.13' ?
Message-ID:  <Pine.QNX4.4.10.9909210923530.19183-100000@ns.anp.nl>
In-Reply-To: <37E6DD2D.360DBF8F@sys.com.sg>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 21 Sep 1999, Brian Tan wrote:

> Henk van Oers wrote:
> > 
> > 
> > "Tried the following"? Did you know what you where doing?
> > Isn't the Cisco wrong configured?
> > 
> The Cisco does have IGRP enabled. Is there any problem allowing the
> protocol packet through? or should the IGRP be disabled in the Cisco?

I do not see the use of "private interior gateway protocol" on a public
interface, so why allow the packets.
And if the Cisco has no  one to talk to, why litter the LAN?
When you "tried" the allow rule, I was thinking of why not try to disallow
it? The ipfw rules are there to enable what you need and not to let
through what you don't know. Isn't it?

Henk.




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.QNX4.4.10.9909210923530.19183-100000>