Re: Cyberkit signature

[Frank Knobbe <frank () knobbe us>]

On Fri, 2003-08-22 at 17:04, Erek Adams wrote:

> Blocking ICMP is bad, M'kay?  </Mr.MackeyVoice>
>
> You break MTU-Path discovery and a couple of other things.  You can if you
> want, but it can wreak havoc on Solaris boxes if you're not careful.
> Consider blocking the ICMP echo request of only the size that the worm
> uses.  It's something odd like 91 bytes I think...


You can block most ICMP types. For MTU path discovery, I believe you
have to leave open (inbound) type 3 and type 11 codes. 

Cheers,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part