In article <14263.990946894@itojun.org>, <itojun@iijlab.net> wrote: > > i believe it is fairly easy - assuming that you are booting a server, > you just need to block all outgoing icmp (and incoming tcp packet with > SYN=1 if you want to). for IPv6 you need to let ND packets go out. > That is a clever way of doing that... christos