Re:DNS servers that offer privacy and filtering
by bluejekyll on Wednesday February 06, 2019 @09:32AM
(#19095296)
Yes. I wasn’t perfectly clear there. You’re correct for the initial src packet, the TTL exceeded response is ICMP, I think always.
I believe this is because you need root privileges/special capabilities to send ICMP packets.