ICMP blocking on PIX .4.4.1

[majordomo <lists () indifference org>]

> Allowing ICMP (or any connection-less protocol, such as UDP) *through*
> the firewall is another issue entirely.  Connection-less protocols are
> not safe.  Cannot be made safe.  Other than perhaps allowing syslog
> from the router to a syslog host, specifically, I don't see any
> particular reason to allow any UDP through a firewall.


Doesn't DNS use udp? As for the icmp issue, I agree with you.


K.J.