Date: Fri, 18 Aug 2006 03:45:10 -0500 From: "Travis H." <solinym@gmail.com> To: "Kian Mohageri" <kian.mohageri@gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: ICMP traffic Message-ID: <d4f1333a0608180145sbe3930ama1309a0c3c488abe@mail.gmail.com> In-Reply-To: <fee88ee40608141300g22f01639yc180a43536478311@mail.gmail.com> References: <200608140938.11880.clacroix@cegep-ste-foy.qc.ca> <d8a4930a0608140642m6bf114c5jae32a1b7f4fa8a27@mail.gmail.com> <200608140956.14645.clacroix@cegep-ste-foy.qc.ca> <fee88ee40608141300g22f01639yc180a43536478311@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
I allow this out: "squench", "echoreq", "timereq", "trace", "skip", "photuris" I block this out: "echorep", "unreach", "redir", "althost", "routeradv" "routersol", "timex", "paramprob", "timerep", "inforeq", "maskreq", "maskrep", "dataconv", "mobredir", "ipv6-where", "ipv6-here", "mobregreq", "mobregrep" This is a little large because some of the ICMPs I wasn't familiar with, but blocking them hasn't hurt me (that I know). Anything coming in has to match a state. I'm not paranoid, it's just that people keep trying to gain my confidence so they can steal my magic bag. :-P -- "If you're not part of the solution, you're part of the precipitate." Unix "guru" for rent or hire -><- http://www.lightconsulting.com/~travis/ GPG fingerprint: 9D3F 395A DAC5 5CCC 9066 151D 0A6B 4098 0C55 1484
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d4f1333a0608180145sbe3930ama1309a0c3c488abe>