ICMP destination unreachable messages

["Max Enders" <Max.Enders () watchguard com>]

Hello,

I'm curious to know how firewalls handle duplicate ICMP destination unreachable messages. How should replayed packets 
be denied? It seems like the two best options are rate limiting and inspecting the IPID. Any information is appreciated.

Thanks,
Max Enders
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards