Re: Compare pf with IPTables

>> it's for nothing more than information gathering,
and
>> why would anyone let ICMP through their firewall
anyway?)
> Because ping isn't evil.

Did you already forget about loki? A wonderful covert channel over "harmless" icmp ping messages.

http://www.phrack.org/show.php?p=49&a=6

I insist: if you don't need it, don't allow it.

Aaron
Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com Received on Sat Jan 4 22:46:29 2003