[oclug] MTU/MRU issue

[Robert Brockway]

On Sat, 5 Mar 2005, Adrian Irving-Beer wrote:

> Unfortunately, a large and growing number of networks out there now
> firewall indiscriminately and don't allow important ICMP messages
> through.  ICMP may as well stand for 'ignored control message
> protocol' these days.  (Not that I am bitter.) ;)

I'm with you Adrian.  One of the ways I rate a tech's clue factor is if 
they take ICMP into account in firewalls they build.  I hope by making 
this statement I encourage people to take ICMP into account in firewalls 
they build[1].

[1] Note, this does not mean letting all ICMP types in.

Rob

-- 
Robert Brockway B.Sc.
Senior Technical Consultant, OpenTrend Solutions Ltd.
Phone: 416-669-3073 Email: rbrockway at opentrend.net http://www.opentrend.net
OpenTrend Solutions: Reliable, secure solutions to real world problems.
Contributing Member of Software in the Public Interest (http://www.spi-inc.org)