Big ICMP with don't Fragment bit

[Thorsten Kruschel <tk@nmmn.com>]

Hi all,

has anybody an Idea how to create an ICMP Packet with size of 1500 and
don't Fragment bit set? Or how to filter such Packets generally with
IPChains?

I've the Problem, that a Maschine cancels the external connection some
times. No entrys in Syslog or anywhere else.
In my Intrusion Detection I see some maschines sending such Packets
before the Maschine cancels the Connection to the external Net. 

Thorsten


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org