From owner-freebsd-security  Mon Jan 18 20:08:04 1999
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id UAA06388
          for freebsd-security-outgoing; Mon, 18 Jan 1999 20:08:04 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from oreo.adsu.bellsouth.com (oreo.adsu.bellsouth.com [205.152.173.36])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA06327
          for <security@freebsd.org>; Mon, 18 Jan 1999 20:07:57 -0800 (PST)
          (envelope-from ck@oreo.adsu.bellsouth.com)
Received: (from ck@localhost)
	by oreo.adsu.bellsouth.com (8.9.1/8.9.1) id XAA06471
	for security@freebsd.org; Mon, 18 Jan 1999 23:07:51 -0500 (EST)
	(envelope-from ck)
Date: Mon, 18 Jan 1999 23:07:51 -0500
From: Christian Kuhtz <ck@adsu.bellsouth.com>
To: security@FreeBSD.ORG
Subject: icmp
Message-ID: <19990118230751.D5878@oreo.adsu.bellsouth.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.95i
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


Nate, et al,

You are right.  If PMTU Discovery actually occurs, filtering ICMP unreachable-
need frag does break things.  Mea culpa.

I had never seen it do that and based on that falsely concluded that it 
wouldn't be affected, since one almost always got away with it (thanks to 
widespread Ethernet).  Learned a lot about ICMP processing in BSD while
reading the sources, though ;).

Nonetheless, calling people clueless and whatever else in private flames 
isn't neccessarily the format I wish this mailing list would take.
Particularly since several of us are making attempts in getting corporate
backing for FreeBSD development & deployment; my nomex underwear can take it,
the guy/gal's with the money might not.

Thanks,
Chris

-- 
  "We are not bound by any concept, we are just bound to make any concept work 
   better than others."                                  --  Dr. Ferry Porsche

[Disclaimer: I speak for myself and my views are my own and not in any way to
             be construed as the views of BellSouth Corporation. ]

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message