Pekka Pietikainen (pp(a)ee.oulu.fi) said:
I noticed redhat-config-securitylevel got the following change, and
was wondering about the rationale (bug 104561 seemed to be marked
private last time I checked)
* Thu Sep 18 2003 Bill Nottingham <notting(a)redhat.com> 1.2.8-1
- allow ICMP in general (#104561)
I was under the impression the previous version which allowed echo and
--state RELATED,ESTABLISHED allows all the icmp traffic that is necessary to
be a Good Internet Citizen (tm), but obviously there was some case
it didn't cover :-)
The bug reprot was about 'need-to-fragment' messages, among others.
Bill