3 Desintation Unreachable and all its sub types
4 Source Quench and its subtypes
11 time exceeded 
12 bad header


Quoting Daniel Crichton ([EMAIL PROTECTED])
On Subject: List of "safe" ICMP types and codes
Date: Wed, Dec 27, 2000 at 03:18:14PM -0000

> Anyone know which ICMP types and codes are reasonably safe to allow 
> through my firewall? I want to keep as much info hidden as possible (so 
> disabling ping and tracert is a start) but also allow messages that help keep 
> connections going (such as type 3 code 4 to allow a smaller MTU to be used 
> for packet sizes). And I need to set these on a PIX which only appears to 
> allow me to specifiy the type, not the code, for the ICMP packets to 
> allow/deny - am I reading the command reference wrong, or is this the case.
> 
> Dan
> 
> ---
> D.C. Crichton                 email: [EMAIL PROTECTED]
> Senior Systems Analyst        tel:   +44 (0)121 706 6000
> Computer Manuals Ltd.         fax:   +44 (0)121 606 0477
> 
> Computer book info on the web:
>    http://computer-manuals.co.uk/
> Want to earn money? Join our affiliate network!
>    http://computer-manuals.co.uk/affiliate/
> 
> 
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]

-- 
Email: [EMAIL PROTECTED]                               ICQ: 93234105
#575 Sun Life Place * 10123 99 Street * Edmonton, AB * Canada * T5J 3H1 
--                                                                   --
When things can't get any worse, they simplify themselves by getting a
whole lot worse then complicated. A complete and utter disaster is the 
simplest thing in the world; it's preventing one that's complex. 
(Janet Morris)
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to