[atlas] IPv6 ICMP - denied packets
- Previous message (by thread): [atlas] IPv6 ICMP - denied packets
- Next message (by thread): [atlas] IPv6 ICMP - denied packets
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Joachim Tingvold
joachim at tingvold.com
Tue Jun 24 00:15:10 CEST 2014
On 23 Jun 2014, at 23:19, Philip Homburg wrote: > Type 1, code 4 is port unreachable. That is triggered by UDP > traceroute. It would be better not to filter those packets. > > Type 1, code 1 means administratively prohibited. It is best to allow > that one as well. Or in general, any destination unreachable ICMP. > > Though I don't understand why 'sequence 2020 permit icmp any any > destination-unreachable' does accept those packets. Does or doesn't? (-: In any case; i figured out that 'destination-unreachable' actually only means type 1, code 3, which would explain a lot. A bit confusing name I guess (even though it makes sense, kinda). So, I'll just change 'destination-unreachable' (type 1, code 3) to 'unreachable' (type 1, all codes), and it should be good. -- Joachim -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: OpenPGP digital signature URL: <https://lists.ripe.net/ripe/mail/archives/ripe-atlas/attachments/20140624/4a056c38/attachment.sig>
- Previous message (by thread): [atlas] IPv6 ICMP - denied packets
- Next message (by thread): [atlas] IPv6 ICMP - denied packets
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]