[lug] making ping not respond

[Richard Fifarek]

On Sat, 9 Feb 2002, Timothy C. Klein wrote:

> Am I just confused, or isn't blocking all ICMP packets *way* too broad?  I
> thought the firewall HOWTO mentioned that many ICMP packets are
> absolutely essential, and your networking will function poorly if they
> are all turned off?

	Not absolutely essential, but certainly nice to have.  Here's the 
URL describing why: 
http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO-5.html#ss5.2

	This is where iptables is a neccessary upgrade because it allows 
stateful filtering, as Dan Radom mentioned.

	     -----------------------------------------------------
	     Richard H. Fifarek	       		rfifarek at silug.org
             -----------------------------------------------------