<div dir="ltr">Thx for your time and answers !!!!<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Feb 19, 2014 at 10:39 AM, Claus Andersen <span dir="ltr"><<a href="mailto:clan@wheel.dk" target="_blank">clan@wheel.dk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">On Wed, 19 Feb 2014, Claus Andersen wrote:<br>
<br>
> On Wed, 19 Feb 2014, Cesar Bermudez wrote:<br>
><br>
>> Sorry to ask, but ..<br>
><br>
> There are no stupid questions - only stupid answers.<br>
<br>
</div>...and the pain of reading you own answer...<br>
<br>
I forgot to add the actual advice. If you would like to avoid breaking as<br>
much as possible but block the obvious dangerous stuff then you should<br>
block for ICMP redirect (type 5). That can be used for re-routing and<br>
should then actively be avoided.<br>
The rest is fairly benign. Personally I rarely block for ICMP echo. Ping<br>
is a very nice diagnostic tool. Some will argue that it can be used to<br>
find a attack vector (that is: confirm something is there). But mostly you<br>
are actively provding services from your host so that vector is easily<br>
found anyway. But as long as you understand the implications it is OK to<br>
block (or not).<br>
<div class="HOEnZb"><div class="h5"><br>
Kind Regards,<br>
Claus Andersen<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br></div>