Especially as we are all running tunnels, you (well your systems) really
want to receive ICMP 3:4 (Fragmentation required, and DF flag set)
messages.
The "Ping of death" is not an issue anymore, and ICMP Flooding isn't
really frequent anymore either. Nowadays neither of both require
rejecting all kind of ICMP messages. Usually a fair rate limiting in the
INPUT chain does the trick.
73 de Marc, LX1UDC
On 2016-02-18 23:44, Marius Petrescu wrote:
> (Please trim inclusions from previous messages)
> _______________________________________________
> Since we are trying to tackle connectivity problems a lot of times,
> could you please enable ICMP replies on your gateways, at least for
> other 44net requestors?
> It will certainly not ruin the gateway’s safety and security and would
> help a lot other OMs.
>
> Tnx,
> Marius, YO2LOJ
>
>