Re: Question about nat filtering with FORWARD

[Pascal Hambourg <pascal.mail@plouf.fr.eu.org>]

Pascal Hambourg a écrit :
> 
> ICMP error messages (destination unreachable, TTL exceeded, 
> fragmentation needed...) are in the RELATED state. So you need RELATED 
> if you don't want to break ICMP error signalling and mechanisms which 
> rely on it such as Path MTU Detection (PMTUD).

Oops, s/Detection/Discovery/

Note that ICMP error signalling is a mandatory part of IP operation, and 
path MTU discovery is enabled by default in Linux, and possibly other 
operating systems.