9 Feb
2011
9 Feb
'11
5:06 p.m.
On Feb 9, 2011, at 9:30 AM, David Freedman wrote:
I think the solution to all of these problems is really to use public addressing but filter access to it at your edge (yes, even ICMP TOOBIG can be filtered safely if you have designed things in a sane way)
Filtering ICMP TOOBIG is actually bad. No matter how sane your design is, you can't count on someone further down the road not having a smaller MTU (unless you're running a 1280 MTU). Owen