Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 08 Jul 2003 03:17:00 -0700
From:      Terry Lambert <tlambert2@mindspring.com>
To:        Socketd <db@traceroute.dk>
Cc:        Toni Andjelkovic <toni@soth.at>
Subject:   Re: 5 "Advanced" networking questions
Message-ID:  <3F0A9A1C.25E6EB35@mindspring.com>
References:  <20030707012205.3103dfc8.db@traceroute.dk> <20030707180252.44036c61.db@traceroute.dk>

next in thread | previous in thread | raw e-mail | index | archive | help
Socketd wrote:
> Ok, anyway to prevent sending ICMP's when ttl = 0? Or do I need a
> firewall?

I guess you want to do this so that you can break path MTU
discovery and fail to properly exchange packets with the DF
bit set in the headers, and which don't take into account
intermediate links with smaller MTUs, like VPNs or PPPOE
links?

What exactly are you getting from disabling ICMP, besides a
broken network connection to some systems you may wish to be
able to exchange packets with?

-- Terry



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3F0A9A1C.25E6EB35>