top | item 20077305

(no title)

sdeziel | 6 years ago

From the article: "This drops all ICMP packets. ICMP is only used to ping a host to find out if it’s still alive."

Please stop this non-sense, there are too many ICMP blackholes already.

discuss

order

kazen44|6 years ago

if you are running IPv6, disabling ICMP is a very bad idea because it disables MTU path discovery.

don't be lazy, don't drop ICMP and just do proper filtering.

fulafel|6 years ago

Same for ipv4.