[OpenAFS] ICMP packets

Garance A Drosihn drosih@rpi.edu
Thu, 18 Mar 2004 13:49:21 -0500


At 12:17 AM -0500 3/18/04, Derek Atkins wrote:
>Derrick J Brashear <shadow@dementia.org> writes:
>
>>>  Normally a firewall would drop pings.
>>
>>  Only if you configure them to.
>
>And such a firewall is configured incorrectly.

However, some firewwalls are configured to "throttle" ICMP packets,
as a safeguard to various DOS problems that pop up.  In that case,
it's hard to argue that they are configured "wrong"...  By "hard
to argue", I mean I can talk until I'm blue in the face, but the
person responsible for the firewall is not going to change anything.

-- 
Garance Alistair Drosehn            =   gad@gilead.netel.rpi.edu
Senior Systems Programmer           or  gad@freebsd.org
Rensselaer Polytechnic Institute    or  drosih@rpi.edu