[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: nft newbie



On Tue, Jul 12, 2022 at 07:13:06PM +0200, Erwan David wrote:

[...]

> It depends on your settings. Personnally on a router I tend to Reject if the
> ICMP goes to the internal network, drop if it would be sent outside. That
> avoids some weird timeouts in the internal network (put your own definition
> of internal)

That looks like a sensible strategy to me.

Cheers
-- 
t

Attachment: signature.asc
Description: PGP signature


Reply to: