firewallspotting

[Byron L. Sonne]

> I'm with Tim 100%.  Avoiding blocking certain ICMP types in and out is 
> essential for the proper functioning of a network.

Not to mention boring! People seem to give up scanning you pretty quick 
if you drop echoreqs. Kinda sad, really ;) And since I set pf to start 
responding to them 6 months ago, I still haven't seen any good action. 
Time for a honeypot, perhaps...

Regards,
Byron "when I was a kid, we scanned deeper than 1 bloody ping" Sonne
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml