Re: Compare pf with IPTables

[Martin Schmachtel <schmadde_(_at_)_syscall_(_dot_)_de>]

Andrew Rucker Jones schrob:

> why would anyone let ICMP through their firewall anyway?)

Is this a trick question? Ever heard of PMTUD? And why exactly would 
you want to block ICMP completely? You may just as well block all IP
Traffic also, because without ICMP, your IP-Connectivity might break
in mysterious ways. 

ciaole
schmadde