Re: Firewall Solution - 50 Users on SDSL Connection

["Marcus J. Ranum" <mjr () ranum com>]

Paul Robertson wrote:
> *Be careful* filtering ICMP, if you're allowing the DF bit to be set, 
> you're going to kill PMTU discovery if you're not careful.

So? Kill it. It was a bad idea in the first place; the standards guys
(once again) didn't think about security boundary devices when
they did their design. If it continues to not work properly, maybe
they'll fix their stupid protocol and be more careful next time. :)

mjr. 

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards