What benefit do they get ... the most important one of all of course ... they don't need to think. If you are a server guy trying to handle a routerey thing (technical term), and can't see a need for either UDP or ICMP (well it's not TCP is it, so it can't be important), then filtering them out will make you look good to your boss !! I think we need to make sure we don't over-estimate the average network technician, and do the following: a) be glad they're doing something b) help them understand the issue by telling what they SHOULD be doing, rather than slagging them for what they shouldn't be doing. Arron Scott Cisco NZ
-----Original Message----- From: owner-nznog(a)list.waikato.ac.nz [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of Joe Abley Sent: Wednesday, 22 August 2001 3:31 PM To: Andrew Cutler Cc: NZNOG List Subject: Re: UPDATE: Xtra broken?
On Wed, Aug 22, 2001 at 03:05:25PM +1200, Andrew Cutler wrote:
It seemed to be working for Joe.
Well, it *seems* to be working fine, right up until the point where I get to the account balance, and there's this big negative number, which surely is wrong, wrong, wrong.
Back to the tangent of the original issue, would anybody who currently filters ICMP or high-numbered UDP through routers be interested in describing what benefit they think they get from doing so?
Lots of people do it. I'm just not exactly sure why.
Joe
--------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
--------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog