[OZAPRS] VK4TTT

Grant Diffey gdiffey at gmail.com
Wed Jan 5 13:48:41 EST 2011


For those who don't know what Damien and I are on about...

http://en.wikipedia.org/wiki/Path_MTU_Discovery

and

http://www.znep.com/~marcs/mtu/

Explain the issue with blocking all ICMP

Regards,
Grant.

On Wed, Jan 5, 2011 at 1:42 PM, Kris Amy <kris at amy.id.au> wrote:

> There is a default deny all in front of that box.
>
> I will open it up a bit more. I only opened the APRS ports initially
> to get it up and running for testing.
>
> Cheers,
> K
>
> On 5 January 2011 12:24, Damien Gardner Jnr <rendrag at rendrag.net> wrote:
> > Indeedy.
> > Though it's been my experience that 99% of 'sys admins' don't know the
> > difference between just blocking ICMP as a whole, and blocking only
> certain
> > ICMP packet types.. :\
> > --DG
> > On 05/01/2011, at 1:22 PM, Grant Diffey wrote:
> >
> > My 2 cents.
> >
> > Blocking ICMP echo is annoying but not disasterous..
> >
> > Blocking all ICMP is incompetence.
> >
> >
> >
> > On Wed, Jan 5, 2011 at 1:20 PM, Damien Gardner Jnr <rendrag at rendrag.net>
> > wrote:
> >>
> >> s/sane/incompetent.
> >>
> >>
> >> On 05/01/2011, at 1:19 PM, Dave Horsfall wrote:
> >>
> >> > On Wed, 5 Jan 2011, Damien Gardner Jnr wrote:
> >> >
> >> >> You might want to bring it online.. not responding to pings, and
> >> >> traceroute stops at pipe qld.. :-p
> >> >
> >> > No sane sysadmin accepts those from other than trusted sources.
> >> >
> >> > -- Dave
> >> > _______________________________________________
> >> > OZAPRS mailing list
> >> > OZAPRS at aprs.net.au
> >> > http://lists.aprs.net.au/mailman/listinfo/ozaprs
> >>
> >> _______________________________________________
> >> OZAPRS mailing list
> >> OZAPRS at aprs.net.au
> >> http://lists.aprs.net.au/mailman/listinfo/ozaprs
> >
> > _______________________________________________
> > OZAPRS mailing list
> > OZAPRS at aprs.net.au
> > http://lists.aprs.net.au/mailman/listinfo/ozaprs
> >
> >
> > _______________________________________________
> > OZAPRS mailing list
> > OZAPRS at aprs.net.au
> > http://lists.aprs.net.au/mailman/listinfo/ozaprs
> >
> >
> _______________________________________________
> OZAPRS mailing list
> OZAPRS at aprs.net.au
> http://lists.aprs.net.au/mailman/listinfo/ozaprs
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.aprs.net.au/pipermail/ozaprs/attachments/20110105/2657cb72/attachment.htm>


More information about the OZAPRS mailing list