Re: kerb problems (Re: can't migrate master key to Heimdal)

[Jason R Thorpe <thorpej%zembu.com@localhost>]

On Sun, Jul 02, 2000 at 11:28:55PM +1000, matthew green wrote:

 > yah, this errratelimit thing is a f*cking PITA.  i recently turned it off
 > on my gateway to make 'traceroute' work properly through it again!
 > 
 > 
 > sheesh.  where does this come from, and why is it enabled by default?

ICMP error rate limiting is mandatory in IPv6, and is also good to
have in IPv4 for the same reason's it's mandatory in IPv6.

One of those reasons is to prevent denial-of-service.

-- 
        -- Jason R. Thorpe <thorpej%zembu.com@localhost>