Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Couple of years ago I wrote a tool to check if end-hosts are complying:

http://icmpcheckv6.popcount.org/

(v4 version http://icmpcheck.popcount.org/ )

it answers:

- can fragments reach you

- can PTB ICMP reach you

hope it's useful. Prose: https://blog.cloudflare.com/ip-fragmentation-is-broken/

Notice: it's easy to run the tests headless with curl if you need to see if your server is configured fine.

Fun fact is that it's very much not easy to accept/send fragmented packets from linux. I learned the hard way what `IP_NODEFRAG` is about.



Wow this is great, thanks for hosting this!


Thank you very much for this! One small thing I noticed: the curl examples on the v6 page call the v4 version.


Woah, I used this tool all the time while debugging hoppy.network! Do you still work at Cloudflare?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: