Date: Sat, 12 Jun 1999 11:13:03 -0400 (EDT) From: Spike <spork@narcissus.net> To: Nate Williams <nate@mt.sri.com> Cc: Pete Fritchman <petef@netreach.net>, Ruslan Ermilov <ru@ucb.crimea.ua>, "Jason L. Schwab" <jschwab@royal.net>, ghandi@mindless.com, freebsd-security@FreeBSD.ORG Subject: Re: firewalls Message-ID: <Pine.BSF.4.05.9906121112550.6023-100000@pigstuy.penguinpowered.com> In-Reply-To: <199906120353.VAA23229@mt.sri.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 11 Jun 1999, Nate Williams wrote: > [ blocking all ICMP packets ] > > I did it before and it worked fine. > > It will affect people trying to connect to you though. *DON'T* firewall > something unless you know the effects of it. Blocking all ICMP is a > violation of RFC, and shows that you don't understand how TCP/IP works. > > *MOST* of the ICMP types can be blocked, but not all of them. Which are appropriate to block? > > > > Nate > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > > -Spike Gronim sporkl@ix.netcom.com Finger gronimw@shell.stuy.edu for PGP public key. The majority only rules those who let them. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9906121112550.6023-100000>