3 ms·
Yes. There is a special circle in hell for braindead firewall admins filtering ICMP. Unfortunately happens often enough that "MTU problem" is the first thing th
by corty 5y ago
Yes. There is a special circle in hell for braindead firewall admins filtering ICMP. Unfortunately happens often enough that "MTU problem" is the first thing that comes to mind at the grandparents description. Next in line would be "broken DNS"...
- deleted 5y ago[deleted]
- temp667 5y agoThey are not braindead. ICMP used to be a bit broken and folks got sick of ping floods, sweeps, redirect attacks and tunneling hacks etc. Some pretty major places block ICMP as a result to keep their network reasoning and security analysis simpler.
- korethr 5y agoJust because they are major places doesn't mean they are right or such practice buys any improvement in security worth the operational cost it imposes.
- bcrl 5y agoICMP ping of death was a thing in the 1990s. Those bugs have been fixed for more than 2 decades now.
- viraptor 5y agoWhat do ping floods do that TCP syn floods don't? (I expect you run at least one service on the exposed hosts) Also what system even accepts ICMP based route redirects by default from the open internet?