Date: Sat, 10 Jun 2000 22:19:16 +0200 From: sthaug@nethelp.no To: dillon@apollo.backplane.com Cc: ghormann@alumni.indiana.edu, vdrifter@ocis.ocis.net, security@FreeBSD.ORG Subject: Re: Setting up simple firewall with ipfw Message-ID: <89461.960668356@verdi.nethelp.no> In-Reply-To: Your message of "Sat, 10 Jun 2000 12:04:15 -0700 (PDT)" References: <200006101904.MAA22680@apollo.backplane.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> You also need to allow ICMP messages through, or TCP will not be > able to do path-mtu-discovery. I usually let pings through as well. > > add ..... allow icmp from any to any icmptypes 0,3,5,8,11,12,13,14 I can sort of understand 12 (Parameter Problem), but why on earth do you want to allow 13 and 14 (Timestamp/Timestamp Reply)? Steinar Haug, Nethelp consulting, sthaug@nethelp.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?89461.960668356>