Re: [OT]Re: Compare pf with IPTables

I'm not saying you should cut ALL ICMP (I think I made that clear from the beggining), but you will agree with me that you don't need ALL ICMP either. I've been running networks selectively cutting SOME ICMP as needed without any kind of trouble for years. I agree with you in that you have to know the protocols, your networks, your services and your systems to be able to do that properly. Blindly cutting all ICMP is a mistake (I hope I make it clear enough, so, as you say, I don't expand the meme).

And no, I don't want to expand the idea that "ICMP is bad". And I don't want to start a flamewar either.

> Cut the crap.

I don't think there is need to be unpolite. We can discuss our points of view and (hopefully) learn something from each other.

Aaron
Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com Received on Sat Jan 4 23:03:44 2003