nanog mailing list archives

Re: rfc1918 ignorant


From: "Kevin Oberman" <oberman () es net>
Date: Wed, 23 Jul 2003 11:58:20 -0700


Date: Wed, 23 Jul 2003 14:06:09 -0400 (EDT)
From: Dave Temkin <dave () ordinaryworld com>

Unless of course I block ICMP for the purposes of denying traceroute but
still allow DF/etc.  Then it's not "broken" as you say.

And where do the ICMPs come from if the DF bit results in a failure?
Surely not an RFC1918 address.
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman () es net                       Phone: +1 510 486-8634


Current thread: