From owner-freebsd-security  Sun Feb 24 18: 0:27 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mohegan.mohawk.net (mohegan.mohawk.net [63.66.68.21])
	by hub.freebsd.org (Postfix) with ESMTP id 1E55C37B404
	for <freebsd-security@FreeBSD.ORG>; Sun, 24 Feb 2002 18:00:24 -0800 (PST)
Received: from mohegan.mohawk.net (mohegan.mohawk.net [63.66.68.21])
	by mohegan.mohawk.net (8.11.4/8.11.3) with ESMTP id g1P20MD67411;
	Sun, 24 Feb 2002 21:00:22 -0500 (EST)
Date: Sun, 24 Feb 2002 21:00:22 -0500 (EST)
From: Ralph Huntington <rjh@mohawk.net>
To: Matt Piechota <piechota@argolis.org>
Cc: <freebsd-security@FreeBSD.ORG>
Subject: Re: Couple of concerns with default rc.firewall
In-Reply-To: <20020224110246.M17449-100000@cithaeron.argolis.org>
Message-ID: <20020224210004.Q67313-100000@mohegan.mohawk.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> I think the question is did the FreeBSD team intentionally (for the
> reasons of security) make the default install non-compliant with some
> RFCs (read: broken), or was it just not thought of?  And second,
> should this be changed?  I don't think the original poster was
> suggesting that deny ip from any to any shouldn't block anything, just
> asking should there be a rule in rc.firewall in the default install to
> allow ICMP so the machine is well behaved.

Thank you.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message