-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Yo Bob!
On Tue, 28 Feb 2006, Bob Radvanovsky wrote:
> I am going to test these rules out -- this looks REALLy good! But...I'v
> e got just ONE question: why on Earth would you permit ICMP???
No ICMP means no P-MTU. No P-MTU mean non-working tunnels.
You want to shoot yourself in the foot, tben go ahead and block ICMP.
RGDS
GARY
- ---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
[EMAIL PROTECTED] Tel:+1(541)382-8588 Fax: +1(541)382-8676
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.1 (GNU/Linux)
iD8DBQFEBK9J8KZibdeR3qURAvwAAJ9Ch+I69KUX6khjcVBHVzrATEfB3ACgw4O4
BQ19Hd2H4WDXLJQNEqf5qLk=
=rGZb
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
