Re: firewall, reject: icmp vs. tcp

Alan Cox (alan@lxorguk.ukuu.org.uk)
Wed, 10 Apr 1996 21:19:25 +0100 (BST)


>
> But shouldn't the ICMP code be one of
> 9 Communication with Destination Network is
> Administratively Prohibited
> 10 Communication with Destination Host is
> Administratively Prohibited
>
> (from RFC1700 Assigned Numbers. These are defined in icmp.h as ICMP_NET_ANO
> and ICMP_HOST_ANO respectively.)

Quite possibly. They cause bizarre error messages to some people with older
hosts, but yes - I'd go with changing to that if someone wants to make the
changes, test it and submit a report in a week or so