Monthly Archives: March 2009

Blocking ICMP

ICMP is actually very useful, sometimes required for things like MTU path discovery or in other words making the packet small enough to fit through all the devices between one end and teh other. Especially important to frag before getting encapsulated into a VPN because if the packet is too big after being encapsulated it will simply be dropped.

Read more