nanog mailing list archives
Re: Common operational misconceptions
From: Chuck Anderson <cra () WPI EDU>
Date: Wed, 15 Feb 2012 18:02:58 -0500
On Wed, Feb 15, 2012 at 04:51:44PM -0600, Anton Kapela wrote:
On Wed, Feb 15, 2012 at 4:36 PM, Chuck Anderson <cra () wpi edu> wrote:ICMP is bad, and should be completely blocked for "security".I can't tell if this reply is to say "this ought to be done" or if "this is often done, and should not be." Clarify?
This thread is about misconceptions. What I said was a common misconception that "all ICMP should be blocked for security reasons". In reality, some kinds of ICMP are REQUIRED for proper functioning of an internetwork for things like Path MTU Discovery (ICMP Fragmentation Needed/Packet Too Big). Other kinds of ICMP are good to allow for being nice to the users and applications by informing them of an error immediately rather than forcing them to wait for a timeout (ICMP Destination Unreachable).
Current thread:
- Re: Common operational misconceptions, (continued)
- Re: Common operational misconceptions Sven Olaf Kamphuis (Feb 17)
- Re: Common operational misconceptions Jared Mauch (Feb 17)
- Re: Common operational misconceptions Leo Bicknell (Feb 15)
- Re: Common operational misconceptions Doug Barton (Feb 15)
- Re: Common operational misconceptions Mark Andrews (Feb 15)
- Re: Common operational misconceptions Doug Barton (Feb 15)
- Re: Common operational misconceptions Chuck Anderson (Feb 15)
- Re: Common operational misconceptions Carsten Bormann (Feb 15)
- Re: Common operational misconceptions Mike Lyon (Feb 15)
- Re: Common operational misconceptions Phil Dyer (Feb 15)
- Re: Common operational misconceptions Anton Kapela (Feb 15)
- Re: Common operational misconceptions Chuck Anderson (Feb 15)
- Re: Common operational misconceptions Jeff Kell (Feb 15)
- Re: Common operational misconceptions Carsten Bormann (Feb 15)
- Re: Common operational misconceptions Chris Campbell (Feb 16)
- Re: Common operational misconceptions Jeff Kell (Feb 16)
- Re: Common operational misconceptions Wayne E Bouchard (Feb 16)
- Re: Common operational misconceptions Justin M. Streiner (Feb 16)
- Re: Common operational misconceptions Tony Tauber (Feb 16)