[nsp] ICMP 8/0 filtering

[odusseus]

Hi

I have three border routers (7200 VXR), two internal routers (Cat 6500), and a set of firewall (PIX 515).

I don't want to be pingable from the Internet.

I would like to know at which place is the most clever to set a filter that would stop ICMP 8/0:
ASBR, internal routers, or the firewall?

I am actually blocking 10000 pings per day from my firewall.

What majore change would it make if I would block this ICMP traffic by the AS border routers?

Thank you.

Christophe
------------------------------------------

Faites un voeu et puis Voila ! www.voila.fr