5 "Advanced" networking questions

Socketd db at traceroute.dk
Tue Jul 8 04:05:21 PDT 2003


On Tue, 08 Jul 2003 03:17:00 -0700
Terry Lambert <tlambert2 at mindspring.com> wrote:

> Socketd wrote:
> > Ok, anyway to prevent sending ICMP's when ttl = 0? Or do I need a
> > firewall?
> 
> I guess you want to do this so that you can break path MTU
> discovery and fail to properly exchange packets with the DF
> bit set in the headers, and which don't take into account
> intermediate links with smaller MTUs, like VPNs or PPPOE
> links?
> 
> What exactly are you getting from disabling ICMP, besides a
> broken network connection to some systems you may wish to be
> able to exchange packets with?

I don't want to disable ICMP, just don't want to respond when ttl=0,
meaning when my firewall/gateway is on a "traceroute path".

br
socketd


More information about the freebsd-hackers mailing list