[AusNOG] icmp best practise

Jeremy Visser jeremy.visser at gmail.com
Mon Nov 23 18:25:22 EST 2015


On Mon, Nov 23, 2015 at 2:15 PM, David Hughes <david at hughes.com.au> wrote:
> Team Cymru could be a good first point of reference.
> https://www.cymru.com/Documents/icmp-messages.html

Ouch. That page doesn't suggest allowing ICMP "Packet Too Big" which
is a recipe for tarpitting TCP should you use IPv6 on a <1500 MTU
network and don't hack your TCP MSS.


More information about the AusNOG mailing list