From owner-freebsd-security  Mon Aug 21  4:18:26 2000
Delivered-To: freebsd-security@freebsd.org
Received: from ux1.ibb.net (ibb0005.ibb.uu.nl [131.211.124.5])
	by hub.freebsd.org (Postfix) with ESMTP id F1B7837B423
	for <freebsd-security@FreeBSD.ORG>; Mon, 21 Aug 2000 04:18:23 -0700 (PDT)
Received: from localhost (mipam@localhost)
	by ux1.ibb.net (8.9.3/8.9.3/UX1TT) with SMTP id NAA07509;
	Mon, 21 Aug 2000 13:17:59 +0200
Date: Mon, 21 Aug 2000 13:17:59 +0200 (MET DST)
From: Mipam <mipam@ibb.net>
To: Jaroshenko Serge <jaroshenko@mail.ru>
Cc: William Wong <willwong@anime.ca>, freebsd-security@FreeBSD.ORG
Subject: Re: icmptypes
In-Reply-To: <Pine.BSF.4.21.0008211451240.8776-100000@freebsd.merlin.ru>
Message-ID: <Pine.LNX.3.95.1000821131544.7312D-100000@ux1.ibb.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Mon, 21 Aug 2000, Jaroshenko Serge wrote:

> 
> Hi!
> read www.obfuscation.org/ipf/ipf-howto.txt .
> 
> By this doc:
> 
> icmp-type 0
> icmp-type 3
> icmp-type 8
> icmp-type 11
> 

Okay, however, why not block in all icmp and let yourself be able to ping
to the outside. With state keeping you'll recieve the reply's.
Unless of course you wish ppl to ping you initially?
Bye,

Mipam.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message