From owner-freebsd-questions  Sun Apr 13 23:37:58 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id XAA19750
          for questions-outgoing; Sun, 13 Apr 1997 23:37:58 -0700 (PDT)
Received: from obiwan.aceonline.com.au (obiwan.aceonline.com.au [203.103.90.67])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id XAA19730;
          Sun, 13 Apr 1997 23:37:50 -0700 (PDT)
Received: from localhost (adrian@localhost)
	by obiwan.aceonline.com.au (8.8.5/8.8.5) with SMTP id OAA01001;
	Mon, 14 Apr 1997 14:20:20 +0800 (WST)
Date: Mon, 14 Apr 1997 14:20:19 +0800 (WST)
From: Adrian Chadd <adrian@obiwan.aceonline.com.au>
To: Eugeny Kuzakov <kev@l321.omsk.net.ru>
cc: freebsd-questions@freebsd.org, freebsd-isp@freebsd.org
Subject: Re: Firewalling large ICMP packets..
In-Reply-To: <Pine.BSD.3.95.970414124611.17294B-100000@l321.omsk.net.ru>
Message-ID: <Pine.BSF.3.95q.970414141934.985A-100000@obiwan.aceonline.com.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

On Mon, 14 Apr 1997, Eugeny Kuzakov wrote:

> On Mon, 14 Apr 1997, Adrian Chadd wrote:

> > I'm trying to firewall large ICMP packets :)
> 
> You may also deny all frag packets. In ipfilter by Darren Red it's simple.
> May I right ?
> 

Ta :)

But then, most of our dialup users have MTU/MRU set to 296, and that would
fragment 1500-byte packets (please correct me if I'm wrong anyone).

Thanks anyway :)

Adrian