[Freeswitch-users] ICMP... and MTU

[Cesar Bermudez]

Thx for your time and answers !!!!


On Wed, Feb 19, 2014 at 10:39 AM, Claus Andersen <clan at wheel.dk> wrote:

> On Wed, 19 Feb 2014, Claus Andersen wrote:
>
> > On Wed, 19 Feb 2014, Cesar Bermudez wrote:
> >
> >> Sorry to ask, but ..
> >
> > There are no stupid questions - only stupid answers.
>
> ...and the pain of reading you own answer...
>
> I forgot to add the actual advice. If you would like to avoid breaking as
> much as possible but block the obvious dangerous stuff then you should
> block for ICMP redirect (type 5). That can be used for re-routing and
> should then actively be avoided.
> The rest is fairly benign. Personally I rarely block for ICMP echo. Ping
> is a very nice diagnostic tool. Some will argue that it can be used to
> find a attack vector (that is: confirm something is there). But mostly you
> are actively provding services from your host so that vector is easily
> found anyway. But as long as you understand the implications it is OK to
> block (or not).
>
> Kind Regards,
> Claus Andersen
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20140219/71a805cc/attachment.html