firewallspotting

[Robert Brockway]

On Fri, 31 Dec 2004, Tim Writer wrote:
Ilya Palagin <tux-4CS0UopE6WdBDgjK7y7TUQ at public.gmane.org> writes:
>> Allowing those ICMP types is definitely a good networking style, but is not
>> absolutely necessary.
>
> To me, that's like saying driving on the right (in North America), is good
> style but not absolutely necessary.  As long as there are no cars heading
> your way, you can drive on the wrong side of the road as much as you like but
> you'll be pretty sorry when traffic patterns change.

I'm with Tim 100%.  Avoiding blocking certain ICMP types in and out is 
essential for the proper functioning of a network.

Cheers,
 	Rob

-- 
Robert Brockway B.Sc.
Senior Technical Consultant, OpenTrend Solutions Ltd.
Phone: 416-669-3073 Email: rbrockway-wgAaPJgzrDxH4x6Dk/4f9A at public.gmane.org http://www.opentrend.net
OpenTrend Solutions: Reliable, secure solutions to real world problems.

--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml