[Outages-discussion] Anyone aware of problems around Chicago (I believe)?

[Richard Dunn]

These days the only thing failures of traceroute and ping mean is that  
ICMP and traceroute don't work.

Security trumps functionality.   The information Security people are  
happy if the network is down, it can't be broken into.

I couldn't do my job anymore without tcptraceroute or lft.  And even  
that is becoming difficult as they only work more and more between  
specific source and destination IPs and ports.  Host to host port to  
port = good security.

Richard


On Apr 30, 2009, at 1:38 PM, Larry Sheldon wrote:

> Scott Weeks wrote:
>
>> It's an ACL.. Traceroute is blocked, but tcptraceroute goes right
>> through:
>
> Is it just me, or are there in fact two rules in general use?
>
> 1.  Failures in traceroute and ping mean the Intartubes are broken.
> 2.  For safety and security, ICMP, ping packets and traceroutes must  
> be blocked.
> _______________________________________________
> Outages-discussion mailing list
> Outages-discussion at outages.org
> https://puck.nether.net/mailman/listinfo/outages-discussion