On Tue, 08 Jul 2003 03:17:00 -0700 Terry Lambert <[EMAIL PROTECTED]> wrote:
> Socketd wrote: > > Ok, anyway to prevent sending ICMP's when ttl = 0? Or do I need a > > firewall? > > I guess you want to do this so that you can break path MTU > discovery and fail to properly exchange packets with the DF > bit set in the headers, and which don't take into account > intermediate links with smaller MTUs, like VPNs or PPPOE > links? > > What exactly are you getting from disabling ICMP, besides a > broken network connection to some systems you may wish to be > able to exchange packets with? I don't want to disable ICMP, just don't want to respond when ttl=0, meaning when my firewall/gateway is on a "traceroute path". br socketd _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"