Bjørn Mork wrote:
Iljitsch van Beijnum <iljitsch@muada.com> writes:
<snip>
After all, Microsoft must have a reason to block all icmp. Or?
However, in that case the only workable course of action would be TO DISABLE PATH MTU DISCOVERY!
You can't have your cake and eat it too.
But maybe the death of icmp is worth some sort of ceremony? Cake or not.
Oddly enough there is a draft on the subject of icmp filtering recomendations is making the rounds. http://tools.ietf.org/wg/opsec/draft-gont-opsec-icmp-filtering-00.txt The opsec working group (opsec@ietf.org) and the authors would appreciate feedback from operators on the subject. thanks joelja
Bjørn
_______________________________________________ NANOG mailing list NANOG@nanog.org http://mailman.nanog.org/mailman/listinfo/nanog