On Wed, 19 Feb 2014, Claus Andersen wrote:...and the pain of reading you own answer...
> On Wed, 19 Feb 2014, Cesar Bermudez wrote:
>
>> Sorry to ask, but ..
>
> There are no stupid questions - only stupid answers.
I forgot to add the actual advice. If you would like to avoid breaking as
much as possible but block the obvious dangerous stuff then you should
block for ICMP redirect (type 5). That can be used for re-routing and
should then actively be avoided.
The rest is fairly benign. Personally I rarely block for ICMP echo. Ping
is a very nice diagnostic tool. Some will argue that it can be used to
find a attack vector (that is: confirm something is there). But mostly you
are actively provding services from your host so that vector is easily
found anyway. But as long as you understand the implications it is OK to
block (or not).
Kind Regards,
Claus Andersen
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org