Subject: Re: Stupid ICMP and fragmentation tricks
To: Paul DuBois <dubois@primate.wisc.edu>
From: Ignatios Souvatzis <ignatios@cs.uni-bonn.de>
List: tech-net
Date: 09/21/1999 17:07:30
On Tue, Sep 21, 1999 at 10:04:04AM -0500, Paul DuBois wrote:
> On Tue, Sep 21, 1999 at 01:35:57AM -0700, M Graff wrote:
> > It seems people who write firewall rules are idiots these days. Most
> > places recommend blocking "all ICMP" -- which breaks M$'s
> > implementation of Path MTU discovery quite nicely.
>
> It's a problem to break Microsoft's implementation?
Wait. Blocking all ICMP will break any PMTU, alongside with other parts
of IP.
-is
--
* Progress (n.): The process through which Usenet has evolved from
smart people in front of dumb terminals to dumb people in front of
smart terminals. -- obs@burnout.demon.co.uk (obscurity)