rfc1918 ignorant

Kevin Oberman oberman at es.net
Wed Jul 23 18:58:20 UTC 2003


> Date: Wed, 23 Jul 2003 14:06:09 -0400 (EDT)
> From: Dave Temkin <dave at ordinaryworld.com>
> 
> Unless of course I block ICMP for the purposes of denying traceroute but
> still allow DF/etc.  Then it's not "broken" as you say.

And where do the ICMPs come from if the DF bit results in a failure?
Surely not an RFC1918 address.
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman at es.net			Phone: +1 510 486-8634



More information about the NANOG mailing list