News for hackers. Stuff that matters.

A comment on Understanding IP, TCP, and HTTP. Parent comment

Re:Understanding IP, TCP, and HTTP by cbsmith on Friday March 07, 2014 @09:08PM (#7363948)
And regarding dropping the ICMP message about fragmentation... good firewall implementations have the firewall discover the MTU behind it and express THAT.. even better they might hide the hops behind it.
[ Parent | on HN ]
Re:Understanding IP, TCP, and HTTP by zAy0LfpBZLC8mAC on Friday March 07, 2014 @09:15PM (#7363969)
There is no such thing as an "MTU behind it", there is a separate path MTU for each and every ordered address pair, more or less (and that's not even static, obviously).

And obviously I was talking about packet filters, not about some kind of application firewall, which obviously doesn't have anything to do with filtering of packets anyhow.

[ Parent | on HN ]