Re: ipfilter, return-icmp and RFC1122

["Steven M. Bellovin" <smb%cs.columbia.edu@localhost>]

On Thu, 5 Jun 2008 18:30:56 -0700
Dennis Ferguson <dennis.c.ferguson%gmail.com@localhost> wrote:

> 
> Broadcast-addressed packets should never transit a router which is  
> working
> properly by default, firewall or not.
> 

You're quite correct.  Note well, though, that 1122 is *host*
requirements, and very deliberately does not discuss *router*
requirements.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb