Re: Compare pf with IPTables

My last posting on the subject.

I definitely may be wrong, but when I speak I don't do it without a background.

Whenever I decide to block a particular ICMP traffic, I add a rule in my IDSs to detect that blocked traffic, and I closely monitor the dropped traffic. After a long while doing so, I've learnt what to allow or not to allow, and the reasons why. So I am definitely not blocking my ICMP traffic blindly.

As a general rule, I prefer the "Close it and see what breaks" approach, than the "Leave it open just in case something breaks". It requires more effort and knowledge but I believe it's a better way.

In any case, it seems that the majority of you think that this approach is not appropriate for ICMP traffic, so there's nothing else to say.

Aaron
Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com Received on Sun Jan 5 01:52:59 2003