List Archive: gentoo-security
Note: Due to technical difficulties, the Archives are currently not up to date.
provides an alternative service for most mailing lists.c.f. bug 424647
On Thu, Jan 08, 2004 at 05:55:26PM +0100, Frank Gruellich wrote:
> * Troy Farrell <troy@...> 8. Jan 04
> > Chain allow-icmp-traffic (2 references)
> > REJECT icmp -- anywhere anywhere
> The default answer of REJECT ist port unreachable. I always wondered,
> if this is a good way to answer to a question in a protocol with no
> ports. Shouldn't you answer with ICMP protocol unreachable maybe?
I thought that ICMP should never be answered with ICMP? So the
correct action would be DROP in this case.
firstname.lastname@example.org mailing list