Re:CLI agents like Claude Code make self-hosting on a home s...
by apstls on Tuesday January 13, 2026 @05:03PM
(#46608916)
That's why you discard ICMP errors.
[ Parent
| on HN ]
Re:CLI agents like Claude Code make self-hosting on a home s...
by eqvinox on Wednesday January 14, 2026 @12:09AM
(#46612560)
If anything, that's why you discard ICMP port unreachable, which I assume you meant.
If you're blanket dropping all ICMP errors, you're breaking PMTUD. There's a special place reserved in hell for that.
(And if you're firewalling your ICMP, why aren't you firewalling TCP?)