From owner-freebsd-security  Wed Oct 31 18:16:30 2001
Delivered-To: freebsd-security@freebsd.org
Received: from smtp15.singnet.com.sg (smtp15.singnet.com.sg [165.21.6.35])
	by hub.freebsd.org (Postfix) with ESMTP id 2394837B422
	for <freebsd-security@freebsd.org>; Wed, 31 Oct 2001 18:16:15 -0800 (PST)
Received: from bryan (ad202.166.107.186.magix.com.sg [202.166.107.186])
	by smtp15.singnet.com.sg (8.11.6/8.11.6) with SMTP id fA12Dem26006
	for <freebsd-security@freebsd.org>; Thu, 1 Nov 2001 10:13:40 +0800
Message-Id: <3.0.32.20011101103631.02115a1c@smtp.magix.com.sg>
X-Sender: spades@smtp.magix.com.sg
X-Mailer: Windows Eudora Pro Version 3.0 (32)
Date: Thu, 01 Nov 2001 10:36:31 +0800
To: freebsd-security@freebsd.org
From: Spades <spades@galaxynet.org>
Subject: Re: IDS135/ICMP_ICMP-REDIRECT_HOST  
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Just a quick question..

By default of denying all incoming/outgoing ICMP via
ipfw using: ipfw add 120 deny icmp from any to any

Does it deny ICMP-REDIRECT packets?

Bryan

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message