At 11:33 AM 10/26/2001, Simon Lockhart wrote: > >Heh. I've found the best solution is to neither let ICMP in or out of > >your network. It works wonders. :) > >Works wonders for breaking PMTUD, etc, too. Not to mention annoying dialup, DSL and dedicated customers when they can't do their own traceroutes, etc.