Hacker News new | ask | show | jobs
by floatboth 1723 days ago
Don't touch ICMP, just don't.

http://shouldiblockicmp.com

https://rachelbythebay.com/w/2015/05/15/pmtud/

> sniffing (and snooping?)

Nothing is new here. ND is basically what ARP was. You don't disable ARP, do you?

1 comments

technically, you cannot even disable ARP because of it inherent reliance on ethernet...

Atleast ND is a proper layer 3 seperation of link-layer discovery..