Re: [Full-disclosure] ICMP Security Vulnerabilities - NEW (cough)

[Jeff Kell]

There's also the ICMP unreachable subtype "packet too big" 
(fragmentation needed but DF bit is set) that lets PMTUD work, and 
should be allowed (in and out).

Jeff
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/