Gentoo Archives: gentoo-security

From: Frank Gruellich <frank@××××××××××××.org>
To: "gentoo-security@×××××××××××××." <gentoo-security@l.g.o>
Subject: Re: [gentoo-security] firewall suggestions?
Date: Fri, 09 Jan 2004 02:32:42
In Reply to: Re: [gentoo-security] firewall suggestions? by Andy Smith
* Andy Smith <andy@××××××××××.net>  9. Jan 04
> On Thu, Jan 08, 2004 at 05:55:26PM +0100, Frank Gruellich wrote: > > * Troy Farrell <troy@×××××××××××.com> 8. Jan 04 > > > Chain allow-icmp-traffic (2 references) > > > REJECT icmp -- anywhere anywhere > > The default answer of REJECT ist port unreachable. I always wondered, > > if this is a good way to answer to a question in a protocol with no > > ports. Shouldn't you answer with ICMP protocol unreachable maybe? > I thought that ICMP should never be answered with ICMP? So the > correct action would be DROP in this case.
Oh, come on, echo request isn't answered with echo reply anymore? Please think, then post. ICMP errors are not answerd, that's right so far. Regards, Frank. -- Sigmentation fault -- gentoo-security@g.o mailing list


Subject Author
Re: [gentoo-security] firewall suggestions? Andy Smith <andy@××××××××××.net>