On Feb 9, 2011, at 9:30 AM, David Freedman wrote: > I think the solution to all of these problems is really to use public > addressing but filter access to it at your edge (yes, even ICMP TOOBIG > can be filtered safely if you have designed things in a sane way) > Filtering ICMP TOOBIG is actually bad. No matter how sane your design is, you can't count on someone further down the road not having a smaller MTU (unless you're running a 1280 MTU).
Owen