Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 4 Jan 2002 23:32:35 +0100
From:      Guido van Rooij <guido@gvr.org>
To:        Terry Lambert <tlambert2@mindspring.com>
Cc:        William Carrel <william.carrel@infospace.com>, freebsd-hackers@freebsd.org
Subject:   Re: path_mtu_discovery
Message-ID:  <20020104223235.GA64301@gvr.gvr.org>
In-Reply-To: <3C36149B.B9C02DCF@mindspring.com>
References:  <26E71536-013D-11D6-8ED3-003065D5E9A4@infospace.com> <3C36149B.B9C02DCF@mindspring.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jan 04, 2002 at 12:46:19PM -0800, Terry Lambert wrote:
> William Carrel wrote:
> > Blocking all ICMP is bad m'kay?
> 
> First, I agree...
> 
> > ipfilter with 'keep state' on the connections will automatically allow
> > back in relevant ICMP messages such as mustfrag.
> 
> Heh... I need to try to write a "mustfrag" daemon, which will
> spoof them back whenever it sees traffic... and see what happens.
> 

The sender will start sending smaller segments. That's it.
But if you are in the patch between sender and receiver you can do worse
things than that.

-Guido

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020104223235.GA64301>