Subject: Re: [BEHAVE] Translating ICMPv4 error messages

From: Kentaro Ebisawa <[email-masked]>
Date: Tue, 05 Jan 2010 10:54:33 +0900

Oh, okay.
I was confused if you have to check the 2nd packet in error.

Thanks for clarification.

-- 
Kentaro Ebisawa <[email-masked]>

On Mon, 04 Jan 2010 13:33:44 -0500
Simon Perreault <[email-masked]> wrote:

> Kentaro Ebisawa wrote, on 2010-01-03 10:15:
> > I think droping or sending it off partially should be up to implementation
> > since some implementation would not even check if there is an 2nd header
> > depending on the overhead.
> 
> All implementations already need to check the IP protocol field of the packet
> contained in an ICMP error message. If the protocol indicates an ICMP message,
> all implementations already need to check the type/code. Therefore, it is
> already trivial to drop ICMP errors containing ICMP errors, without adding any
> overhead.
> 
> Simon
> -- 
> DNS64 open-source   --> http://ecdysis.viagenie.ca
> STUN/TURN server    --> http://numb.viagenie.ca
> vCard 4.0           --> http://www.vcarddav.org