Re: [tor-dev] Do Tor relays rely on ICMP type 11 (time exceeded / timeout in transit)?

2017-10-22 Thread Igor Mitrofanov
! On Sun, Oct 22, 2017 at 1:55 PM, teor wrote: > >> On 23 Oct 2017, at 05:14, Igor Mitrofanov >> wrote: >> >> On my relays I am dropping any traffic that Tor itself does not rely on. >> I wonder if I should allow or block incoming and/outgoing ICMP type 11 >

[tor-dev] Do Tor relays rely on ICMP type 11 (time exceeded / timeout in transit)?

2017-10-22 Thread Igor Mitrofanov
Hi, On my relays I am dropping any traffic that Tor itself does not rely on. I wonder if I should allow or block incoming and/outgoing ICMP type 11 (time exceeded / timeout in transit)? My host does receive some ICMP type 11 packets, and does seem to send some out, but I am not sure if Tor is the