Re: (OT) Blocking ICMP

2015-10-08 Thread Antony Prince
On 10/08/2015 04:05 PM, Peter Lebbing wrote: ... > > That's a major part of the problem: the people who block all ICMP packets are > usually not the ones affected by the issue. They never notice, and it's other > people who get the issues when connecting to them. > > Just blocking echo-request (o

Re: (OT) Blocking ICMP

2015-10-08 Thread Peter Lebbing
On 08/10/15 21:51, Antony Prince wrote: > I haven't had a single issue with any of the traffic I route through it, so > I'm assuming it is fine. The issue with PMTU discovery only happens when there is a smaller MTU in the middle of the path from you to another system. This can be a very rare occ

Re: (OT) Blocking ICMP

2015-10-08 Thread Antony Prince
On 10/08/2015 03:45 PM, Peter Lebbing wrote: > I hope you mean specifically dropping all ICMP echo-request packets, not all > I could've been more specific, but yes. ICMPv4 echo requests. AFAIK anyway. I haven't had a single issue with any of the traffic I route through it, so I'm assuming it is f

(OT) Blocking ICMP (was: Re: ?: keys.gnupg.net: Host not found)

2015-10-08 Thread Peter Lebbing
On 08/10/15 21:26, Antony Prince wrote: > I host a server in this pool and it is set to drop all IPv4 ICMP packets I hope you mean specifically dropping all ICMP echo-request packets, not all ICMP packets. Because some ICMP packets are *essential* for proper functioning of your internet connection