From owner-freebsd-security  Wed Jun 27  8:20:44 2001
Delivered-To: freebsd-security@freebsd.org
Received: from NTMAIL.avint.net (ntmail.avint.net [198.165.75.239])
	by hub.freebsd.org (Postfix) with ESMTP id 6428D37B401
	for <freebsd-security@freebsd.org>; Wed, 27 Jun 2001 08:20:41 -0700 (PDT)
	(envelope-from graham@avint.net)
Received: from hercules.avint.net ([198.165.75.7]) by NTMAIL.avint.net
          (Post.Office MTA v3.5.3 release 223 ID# 0-52622U2500L250S0V35)
          with SMTP id net for <freebsd-security@freebsd.org>;
          Wed, 27 Jun 2001 12:49:48 -02-3
From: Graham Rose <graham@avint.net>
Reply-To: graham@infotechcanada.com
Organization: Avalon InterConnect & Infotech Canada
To: <freebsd-security@freebsd.org>
Subject: RE: disable traceroute to my host
Date: Wed, 27 Jun 2001 12:49:31 -0230
X-Mailer: KMail [version 1.0.28]
Content-Type: text/plain
References: <NFBBKAEAALGGGFKINBLAMEFMCAAA.peter@sysadmin-inc.com>
In-Reply-To: <NFBBKAEAALGGGFKINBLAMEFMCAAA.peter@sysadmin-inc.com>
MIME-Version: 1.0
Message-Id: <01062712515103.10969@hercules.avint.net>
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


http://www.isi.edu/in-notes/iana/assignments/icmp-parameters

www.iana.org


On Wed, 27 Jun 2001, Peter Brezny wrote:
> Peter,
> 
> What is a good document to get more info on ICMP types?
> 
> Thanks.
> 
> Peter Brezny
> SysAdmin Services Inc. 
> 
> -----Original Message-----
> From: owner-freebsd-security@FreeBSD.ORG
> [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Peter Jeremy
> Sent: Tuesday, June 26, 2001 5:15 PM
> To: 3APA3A
> Cc: alexus; freebsd-security@FreeBSD.ORG
> Subject: Re: disable traceroute to my host
> 
> 
> On 2001-Jun-26 15:08:13 +0400, 3APA3A <3APA3A@SECURITY.NNOV.RU> wrote:
> >deny ICMP from (YOURNETWORK) to any icmptypes 0,3,11 out
> >
> >0 - to stop windows traceroute and ping
> >3 - to stop BSD-style traceroute
> >11 - to prevent intermediate router to reply traceroute
> 
> Blocking ICMP type 3 will break Path-MTU discovery (which relies on
> type 3 code 4).
> 
> Peter
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message