[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] reduction of brute force log

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yo Bob!

On Tue, 28 Feb 2006, Bob Radvanovsky wrote:

> I am going to test these rules out -- this looks REALLy good!  But...I'v
> e got just ONE question: why on Earth would you permit ICMP???

No ICMP means no P-MTU.  No P-MTU mean non-working tunnels.

You want to shoot yourself in the foot, tben go ahead and block ICMP.

RGDS
GARY
- ---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
        gem@xxxxxxxxxx  Tel:+1(541)382-8588 Fax: +1(541)382-8676

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.1 (GNU/Linux)

iD8DBQFEBK9J8KZibdeR3qURAvwAAJ9Ch+I69KUX6khjcVBHVzrATEfB3ACgw4O4
BQ19Hd2H4WDXLJQNEqf5qLk=
=rGZb
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/