Re: (PM) filtering ICMP

Miquel van Smoorenburg (list-portmaster-users@news.cistron.nl)
18 Nov 1997 21:52:24 +0100

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Mury Johnson: "Re: (PM) FOR SALE: Livingston Portmaster..."
Previous message: David Glynn: "(PM) SLC's, PM-3's, and GTE"

In article <Pine.LNX.3.96.971118115904.13465B-100000@linux.ams.com>,
Jake Messinger <jake@ams.com> wrote:
>Then for example to stop ICMP echo packetoids, do something like:
>
>set filter f.in deny <from destination address> 0.0.0.0/0 icmp type 8
>
>To stop ALL the ICMP packet types leave off the type 8. But I dont
>know if you want to deny ALL incoming ICMP as that might upset some users.

Don't. ICMP is used for more things.. like MTU discovery.

Mike.

-- Miquel van | Cistron Internet Services -- Alphen aan den Rijn. Smoorenburg, | mailto:info@cistron.nl http://www.cistron.nl/ miquels@cistron.nl | PTT's Het Net: Surfen in de gootsteen! <*>

-- 
The From: and Reply-To: addresses are internal mail2news gateway addresses.
Reply to the list or to miquels@cistron.nl (Miquel van Smoorenburg)
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.

Next message: Mury Johnson: "Re: (PM) FOR SALE: Livingston Portmaster..."
Previous message: David Glynn: "(PM) SLC's, PM-3's, and GTE"