Re: ICMP blocking

[ken lindahl <lindahl () BERKELEY EDU>]

Gary Dobbins wrote:
> Quick survey:  Who's blocking ICMP subsets (like echo requests,
> traceroutes) at their borders?  Who's not?  Strong feelings about why in
> either case?

berkeley is not and feels strongly about it. ping and traceroute can be
extremely useful for troubleshooting basic network connectivity problems,
and can provide important information for understanding more complex
performance issues.

> Certainly, doing so is not a huge security gain, but the alternative
> means you're giving away the map anonymously.

our map is posted on a web page. but we try to keep it out of date to
throw off the bad guys. ;-)

> How polar is the community on this?

this community of one is extremely polar.

ken