Muhammad Yousuf Khan a écrit : > > i know ICMP didnt have ports and it is a layer 4 proto.
ICMP is tranported on top on IP which is a layer 3 (network) protocol, but that does not make it a layer 4 protocol. ICMP provides services that are part of the IP protocol, so it is rather a layer 3 protocol. > secondly the concern that this is not the right approach. i know that > this is not a way of blocking stuff. i should have drop the traffic > one by one after opening all the traffic. Rather the other way around : you should accept specific traffic and block everything else by default. > i know in other words we are talking about "Transparent " proxy. No, this is packet filtering and has nothing to do with transparent proxy. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f8ab5bb.2050...@plouf.fr.eu.org
