tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: ipfilter, return-icmp and RFC1122

On Thu, 5 Jun 2008 18:30:56 -0700
Dennis Ferguson <> wrote:

> Broadcast-addressed packets should never transit a router which is  
> working
> properly by default, firewall or not.

You're quite correct.  Note well, though, that 1122 is *host*
requirements, and very deliberately does not discuss *router*

                --Steve Bellovin,

Home | Main Index | Thread Index | Old Index