From owner-freebsd-security  Mon Aug 21  3:54:44 2000
Delivered-To: freebsd-security@freebsd.org
Received: from smtp6.port.ru (mx6.port.ru [194.67.23.42])
	by hub.freebsd.org (Postfix) with ESMTP id 1954437B42C
	for <freebsd-security@freebsd.org>; Mon, 21 Aug 2000 03:54:41 -0700 (PDT)
Received: from [212.96.98.32] (helo=[212.96.98.32])
	by smtp6.port.ru with esmtp (Exim 3.14 #4)
	id 13QpDk-000Gft-00; Mon, 21 Aug 2000 14:54:28 +0400
Date: Mon, 21 Aug 2000 14:54:22 +0400 (MSD)
From: Jaroshenko Serge <jaroshenko@mail.ru>
X-Sender: jaroshenko@freebsd.merlin.ru
To: William Wong <willwong@anime.ca>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: icmptypes
In-Reply-To: <004501c00b49$37be2420$0300a8c0@anime.ca>
Message-ID: <Pine.BSF.4.21.0008211451240.8776-100000@freebsd.merlin.ru>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


Hi!
read www.obfuscation.org/ipf/ipf-howto.txt .

By this doc:

icmp-type 0
icmp-type 3
icmp-type 8
icmp-type 11

On Mon, 21 Aug 2000, William Wong wrote:

> Hi there,
> 
> When building a firewall, is there any advantage to restricting allowed icmp
> types?
> And if there is, which icmptypes should be allowed in at the minimum?
> 
> - Will
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 
> 
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message