Date: Fri, 11 Jun 1999 22:19:07 -0500 (CDT) From: James Wyatt <jwyatt@RWSystems.net> To: Ruslan Ermilov <ru@ucb.crimea.ua> Cc: Pete Fritchman <petef@netreach.net>, "Jason L. Schwab" <jschwab@royal.net>, ghandi@mindless.com, freebsd-security@FreeBSD.ORG Subject: Re: firewalls Message-ID: <Pine.BSF.4.05.9906112217580.17828-100000@kasie.rwsystems.net> In-Reply-To: <19990612004633.A29090@relay.ucb.crimea.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
btw: So does my DSL bridge. We have to wire the MTU. Doesn't seem to hurt anything else, though. - Jy@ On Sat, 12 Jun 1999, Ruslan Ermilov wrote: > On Fri, Jun 11, 1999 at 05:15:07PM -0400, Pete Fritchman wrote: > > You probably just want to deny all icmp to your dialup. > > > > ipfw add deny icmp from any to any > > > Don't do it!!! It will broke Path MTU discovery: > http://www.worldgate.com/~marcs/mtu/ > > Instead, use ICMP_BANDLIM option: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9906112217580.17828-100000>