[AusNOG] icmp best practise

[Colin Stubbs]

The CYMRU page is pretty IPv4 specific. It’s not even attempting to touch
on IPv6 as yet. Same as what it originated from, e.g. the Secure IOS
template.


On 23 November 2015 at 17:25, Jeremy Visser <jeremy.visser at gmail.com> wrote:

> On Mon, Nov 23, 2015 at 2:15 PM, David Hughes <david at hughes.com.au> wrote:
> > Team Cymru could be a good first point of reference.
> > https://www.cymru.com/Documents/icmp-messages.html
>
> Ouch. That page doesn't suggest allowing ICMP "Packet Too Big" which
> is a recipe for tarpitting TCP should you use IPv6 on a <1500 MTU
> network and don't hack your TCP MSS.
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20151123/0adb41eb/attachment.html>