13 Oct
2000
13 Oct
'00
07:46
i must admit you are right. there are advantages and there are disadvantages. i would then suggest only blocking dest-unreachable and time-exceeded for i don't believe they are part of a port/os sniff. correct me if i am wrong.
port sniff yep. Check out firewalk http://securityportal.com/lskb/10000050/kben10000060.html
martin
-Kurt