----- "Valdis Kletnieks" <Valdis.Kletnieks@vt.edu> wrote:
On Sun, 28 Sep 2008 17:43:00 CDT, "Laurence F. Sheldon, Jr." said:
They apparently block ICMP as current best practice seems to require.
Ahem. Who said "block ICMP' is BCP? Yes, there's some ICMP thingsthat you probably *should* block if they're to/from untrusted sources, butin particular, host/net unreachable ICMP shouldn't be blocked, and thenext site I catch blocking 'Frag Needed' I'm gonna get on a plane and re-educate them with a clue-by-four regarding what they're doing to PMTUD.
The Department Of Homeland Insecurity will put you on their no-route list if they catch you trying to sneak a clue-by-four onto a plane, Valdis. Cheers, -- jra -- Jay R. Ashworth Baylink jra@baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com '87 e24 St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274 Those who cast the vote decide nothing. Those who count the vote decide everything. -- (Josef Stalin)