Subj : Basic Steps / Checks to look at IPv6
To   : Markus Reschke
From : Benny Pedersen
Date : Tue Sep 22 2015 22:37:22

Hello Markus!

22 Sep 2015 21:03, Markus Reschke wrote to Benny Pedersen:

 MR>>> Echo request/reply is just a small part of ICMP. The best approach is 
 MR>>> to rate limit echo requests to allow debugging while protecting the 
 MR>>> host/net.

 BP>> no no no and no rate limiting on ICMP, its either fail or succes

 MR> I meant rate limiting on echo requests. And this is also the best 
 MR> current practice.

well PING can be ratelimited, ICMP should not

my own qqustion is more on how to allow ICMP in safe mode, lan and wan side, gateway wide or local only, see my own shorewall6 dump i have sent here before

how to make windows behave aswell is not my problem :=)


 Regards Benny

.... there can only be one way of life, and it works :)

--- Msged/LNX 6.2.0 (Linux/4.2.0-gentoo-r1 (i686))
 * Origin: openvpn on its way here (1:261/38.20)

.