Date: Thu, 29 Feb 1996 11:10:43 +0100 From: Andras Olah <olah@cs.utwente.nl> To: current@freebsd.org Subject: Processing ICMP packets (was: -stable hangs at boot (fwd)) Message-ID: <11766.825588643@curie.cs.utwente.nl> In-Reply-To: Your message of "Wed, 28 Feb 1996 11:14:21 PST." <96Feb28.111437pst.177480@crevenia.parc.xerox.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 28 Feb 1996 11:14:21 PST, Bill Fenner wrote: > In message <199602262117.PAA15987@brasil.moneng.mei.com>you write: > >Yes, I can imagine :-) I just want my firewalls to do something mildly > >more social - like return a HOST_UNREACHABLE > > How about "Communication Administratively Prohibited" (code 13, see RFC1812 > section 5.3.9) I've got two questions related to the handling of ICMP packets: 1. Shouldn't icmp_input() map ICMP type 3, code 13 packets to PRC_UNREACH* error codes, instead of discarding them? 2. Background info: What's the difference between codes 9, 10 (ICMP_UNREACH_{NET,HOST_PROHIB) and 13? Is 13 a code which covers both 9 and 10, or does it have a special meaning? Thanks, Andras
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?11766.825588643>