Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-security
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-security@g.o
From: Oliver Schad <o.schad@...>
Subject: Re: firewall suggestions?
Date: Thu, 8 Jan 2004 17:00:14 +0100
Am Donnerstag, 8. Januar 2004 16:21 schrieb mir MA:
> Actually I'm allowing icmp :)
>
> Interesting discussion for me as a noob though.

In some cases users decrease their MTU until the connection works instead 
of respecting the wish of the packet filter admin to ignore the site.

Sometimes your packets are too big for some parts of the net without 
fragmenting so you get a message that you should reduce your packet size. 
If you block such messages, you can't connect with the target. These 
messages are delivered by ICMP so blocking of ICMP is very stupid.

mfg
Oli

--
gentoo-security@g.o mailing list

Replies:
Re: firewall suggestions?
-- Mark Hurst
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: firewall suggestions?
Next by thread:
Re: firewall suggestions?
Previous by date:
Re: firewall suggestions?
Next by date:
Re: firewall suggestions?


Updated Oct 31, 2011

Summary: Archive of the gentoo-security mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.