lkml.org 
[lkml]   [1997]   [Sep]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: IP fragmentation problem in the 2.0 kernels ?
Date
Followup to:  <199709100727.DAA07346@jenolan.rutgers.edu>
By author: "David S. Miller" <davem@jenolan.rutgers.edu>
In newsgroup: linux.dev.kernel
>
> Anyone know how IPv6 handles masquerade/forward/et al?
> (RFC's?) - I've only read up to 1850 (roughly)
>
> I think in Ipv6, the standards are very stingent about "everybody,
> including routers and all hosts, must play the PMTU discovery game
> correctly or else" Something like that...
>

Note that a transparent-proxy (a.k.a. transport-layer) firewall causes
packet reassembly, so it will play the PMTU game separately on each
side. A packet filter (a.k.a. network-layer firewall) must pass the
relevant ICMP packets through.

Does anyone have a good list of ICMP and IGMP packets that
should/should not be safely packet filtered? I presume this will be a
list looking something like:

Type FOO can always be filtered out
Type BAR must never be filtered out
Type QUUX must only be filtered for incoming packets for which
<magic_address> is within the inside network

-hpa
--
PGP: 2047/2A960705 BA 03 D3 2C 14 A8 A8 BD 1E DF FE 69 EE 35 BD 74
See http://www.zytor.com/~hpa/ for web page and full PGP public key
Always looking for a few good BOsFH. ** Linux - the OS of global cooperation
I am Baha'i -- ask me about it or see http://www.bahai.org/

\
 
 \ /
  Last update: 2005-03-22 13:40    [W:0.708 / U:0.108 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site