From owner-freebsd-security Thu Mar 22 12:32:27 2001 Delivered-To: freebsd-security@freebsd.org Received: from smtp.matrix.com.br (c8ca1107.matrix.com.br [200.202.17.7]) by hub.freebsd.org (Postfix) with ESMTP id 6508E37B780 for ; Thu, 22 Mar 2001 12:32:16 -0800 (PST) (envelope-from speed@x-ray.matrix.com.br) Received: from x-ray.matrix.com.br (x-ray.matrix.com.br [200.196.0.241]) by smtp.matrix.com.br (Postfix) with ESMTP id B5CA272F78; Thu, 22 Mar 2001 17:32:08 -0300 (EST) Received: (from speed@localhost) by x-ray.matrix.com.br (8.11.1/8.11.1) id f2MKVvm06050; Thu, 22 Mar 2001 17:31:57 -0300 (BRT) (envelope-from speed) Date: Thu, 22 Mar 2001 17:31:57 -0300 From: Rodrigo Campos To: Ilya Martynov Cc: Chris Byrnes , freebsd-security@FreeBSD.ORG Subject: Re: DoS attack - advice needed Message-ID: <20010322173157.C5678@x-ray.matrix.com.br> References: <86snk5pudk.fsf@juil.domain> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <86snk5pudk.fsf@juil.domain>; from m_ilya@agava.com on Thu, Mar 22, 2001 at 08:48:39PM +0300 X-Operating-System: FreeBSD i386 X-Organization: Matrix Internet - but not speaking for X-URL: http://www.br-unix.org/users/campos/index.html Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, Mar 22, 2001 at 08:48:39PM +0300, Ilya Martynov wrote: > >>>>> "CB" == Chris Byrnes writes: > > >> ping uses type 0 and 8 > >> > >> traceroute uses 11 > > CB> Who needs it. > > Who knows? Probably nobody :) That's not true at all. Filtering all ICMP traffic can result in very odd connectivity problems due to Path MTU discovery issues. There's a very good white paper about it that can be found at http://www.worldgate.com/~marcs/mtu/ Regards, -- Rodrigo Campos Matrix Internet S.A. - NOC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message