News for hackers. Stuff that matters.

A comment on Setting up a home VPN server with WireGuard. Parent comment

Re:Setting up a home VPN server with WireGuard by drclau on Saturday November 02, 2019 @05:36AM (#21426722)
Make sure you don’t block ICMP, which is used by Path MTU Discovery [0].

Blocking ICMP may result in black holed connections. I experienced this just like you with websites not working, and with ssh freezing when doing an ll in a directory with a large number of files, or even when starting mc. In my case, an upstream server was blocking ICMP for no good reason (there’s never a good reason to do it permanently, really).

[0]: https://en.m.wikipedia.org/wiki/Path_MTU_Discovery

[ Parent | on HN ]
Re:Setting up a home VPN server with WireGuard by labawi on Monday November 04, 2019 @04:51AM (#21440177)
Ehm, make sure you don't block parts of ICMP important in given network circumstances.

Many types of ICMP messages can be very nasty. ICMP and ICMPv6 RFCs actually describe which messages are importatnt and should not be blocked in any networks, which are dangerous and should be restricted, and varieties between.

[ Parent | on HN ]