Filtering ICMP messages without the response "packet filtered"

[hgru]

Hi,

A customer is requesting me to filter ICMP messages on a router. Fine no problem but he specifies that there is a security issue if I block all ICMP messages. According to this customer blocking all will generate a "packet filtered" message back to the sender that will reveal the existance an the IP address of the router. What message type should I not filter to prefent this.

Thanks,

Hans

[osam]

On the interface you are filtering your packets on, just use,

"no ip unreachable"

I hope this helps.