ICMP ingress/egress filtering

[Fernando Gont <fernando () gont com ar>]

Folks,

Some time ago I had written an explanation about filtering of ICMP 
error messages for some friend of mine. Given that there seems to be 
some confusion on the subject (that's the discussion I get from 
discussions in other forums), I have made the text publicly available.

You can find it at: http://www.gont.com.ar/papers/icmp-errors

The orginial paper on ICMP attacks (which includes a section on ICMP 
filtering) can be obtained at: 
http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html

(The last revision was published in February 2006)

Kindest regards,

--
Fernando Gont
e-mail: fernando () gont com ar || fgont () acm org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1