[ILUG] From the register. XP machine rooted in 200 seconds.

[Paul Jakma]

On Wed, 1 Dec 2004, Chris Higgins wrote:

> #define ICMP_DEST_UNREACH       3       /* Destination Unreachable      */

You probablu dont want to block this one, its useful information (eg 
to tell you to try another address you may have for the host/service 
you're trying to reach.).

> #define ICMP_REDIRECT           5       /* Redirect (change route)      */

You dont want to block this one if you have logical subnets on an 
interface and still want to be able to talk to them.

> #define ICMP_TIME_EXCEEDED      11      /* Time Exceeded                */

Blocking this would break traceroutes.

> #define ICMP_PARAMETERPROB      12      /* Parameter Problem            */

Why block this?

> #define ICMP_ADDRESS            17      /* Address Mask Request         */
> #define ICMP_ADDRESSREPLY       18      /* Address Mask Reply           */

These arent used any more TTBOMK (they date from an RFC from pre-CIDR 
days), indeed i dont think they ever saw much use.

regards,
-- 
Paul Jakma	paul at clubi.ie	paul at jakma.org	Key ID: 64A2FF6A
Fortune:
Humor in the Court:
Q.  And who is this person you are speaking of?
A.  My ex-widow said it.