Josh Huber wrote:
> avedis(a)rcn.com writes:
>
>
>>[...]
>>then could surf, with download speeds up to 1.7M/s.
>
> Just curious, is that bytes or bits? (I wasn't aware of verizon
> offering such a fast link)>
Bits, I think. Whatever they advertise as supplying 1.5meg
down and 128k up. I'm at the bottom of the hill from the phone
company, so maybe that helps. I downloaded knoppix (700MB) in
a little more than an hour.
>
> I'm not sure why you would want to drop all pings. You'll
probably
> find that the default firewalling rules drop some kinds of ICMP
> packets, but there are some which are useful to keep
> around. (personally, I think dropping all inbound ICMP is pretty
> annoying when trying to diagnose network issues...)
>
I don't know enough to have an answer. How many kinds of ICMP
are there? The firewall config file gives three choices -
# Allow (or don't) ICMP echo pings on either the firewall or
the dmz from
# the internet? The internet option is for allowing the DMZ
and the internal
# network to ping the internet.
FW_ALLOW_PING_FW="no"
FW_ALLOW_PING_DMZ="no"
FW_ALLOW_PING_EXT="no"
I understand that the first two determine whether the firewall
or the dmz respond to pings from the internet, but I'm not
sure what the third option does. I am able to ping out to the
internet, even though it's set to 'no', so I don't understand
the last comment.
> As for port 119, this appears to be the NNTP (net news) port
-- why
> would you be running a news server I'm not sure :)
>
Woops. I meant port 113, identd/auth.
Thanks,
Greg
