Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Jul 2003 14:00:12 +0200
From:      Socketd <db@traceroute.dk>
To:        Terry Lambert <tlambert2@mindspring.com>, hackers@freebsd.org
Subject:   Re: 5 "Advanced" networking questions
Message-ID:  <20030708140012.0fd685c8.db@traceroute.dk>
In-Reply-To: <3F0AA830.9A82CB37@mindspring.com>
References:  <20030707012205.3103dfc8.db@traceroute.dk> <20030707153314.GA1695@webboy.soth.at> <20030707180252.44036c61.db@traceroute.dk> <3F0A9A1C.25E6EB35@mindspring.com> <20030708131339.16da151f.db@traceroute.dk> <3F0AA830.9A82CB37@mindspring.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 08 Jul 2003 04:17:04 -0700
Terry Lambert <tlambert2@mindspring.com> wrote:

> > I don't want to disable ICMP, just don't want to respond when ttl=0,
> > meaning when my firewall/gateway is on a "traceroute path".
> 
> You should specifically modify the ICMP code to not respond
> to echo datagrams, or when ttl == 0, then, and work it that
> way.  In other words, it's time to hack your network stack
> to specifically add that "feature".

Hmm, why not just use a firewall?

br
socketd



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030708140012.0fd685c8.db>