top | item 46608916 (no title) apstls | 1 month ago That's why you discard ICMP errors. discuss order hn newest eqvinox|1 month ago If anything, that's why you discard ICMP port unreachable, which I assume you meant.If you're blanket dropping all ICMP errors, you're breaking PMTUD. There's a special place reserved in hell for that.(And if you're firewalling your ICMP, why aren't you firewalling TCP?)
eqvinox|1 month ago If anything, that's why you discard ICMP port unreachable, which I assume you meant.If you're blanket dropping all ICMP errors, you're breaking PMTUD. There's a special place reserved in hell for that.(And if you're firewalling your ICMP, why aren't you firewalling TCP?)
eqvinox|1 month ago
If you're blanket dropping all ICMP errors, you're breaking PMTUD. There's a special place reserved in hell for that.
(And if you're firewalling your ICMP, why aren't you firewalling TCP?)