From owner-freebsd-questions  Mon Jan  4 06:49:56 1999
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id GAA22556
          for freebsd-questions-outgoing; Mon, 4 Jan 1999 06:49:56 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from mimas.eclipse.net.uk (mimas.eclipse.net.uk [195.188.32.17])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA22545
          for <freebsd-questions@FreeBSD.ORG>; Mon, 4 Jan 1999 06:49:54 -0800 (PST)
          (envelope-from stuart@eclipse.net.uk)
Received: from eclipse.net.uk (mimas.eclipse.net.uk [195.188.32.17])
	by mimas.eclipse.net.uk (8.9.1/8.9.1) with ESMTP id OAA01295
	for <freebsd-questions@FreeBSD.ORG>; Mon, 4 Jan 1999 14:48:33 GMT
Message-ID: <3690D4C1.B37FE486@eclipse.net.uk>
Date: Mon, 04 Jan 1999 14:48:33 +0000
From: Stuart Henderson <stuart@eclipse.net.uk>
Organization: Eclipse Networking
X-Mailer: Mozilla 4.05 [en] (X11; I; Linux 2.0.35 i686)
MIME-Version: 1.0
To: freebsd-questions@FreeBSD.ORG
Subject: Can ipfw filter only certain codes within an icmp type?
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

I'm trying to configure an ipfw to filter most 
ICMP_UNREACH (icmptype 3) messages but allow 
ICMP_UNREACH_PORT (type=3,code=3) through (so
that traceroute still works). Is this possible
without local patches?

Thanks in advance,
Stuart

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message