[prev in list] [next in list] [prev in thread] [next in thread] 

List:       netfilter-devel
Subject:    Re: iptables icmp protocol match bug.
From:       Henrik Nordstrom <hno () marasystems ! com>
Date:       2003-07-31 23:57:02
[Download RAW message or body]

On Fri, 1 Aug 2003, Patrick McHardy wrote:

> It is not defined. The highest defined type is ICMP_ADDRESSREPLY (18).
> Of course some application could construct _invalid_ icmp packets, but
> who cares ?

Anyone who wants to block such invalid ICMP packets.. but given the low 
ratio of valid ICMP codes it is easier to build a list of what one accepts 
than what not.

Regards
Henrik


[prev in list] [next in list] [prev in thread] [next in thread]