Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 Oct 1998 14:18:39 -0700 (PDT)
From:      Doug White <dwhite@resnet.uoregon.edu>
To:        Sam Zamarripa <samz@oz.net>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: ipfw & icmp
Message-ID:  <Pine.BSF.4.03.9810061417361.19930-100000@resnet.uoregon.edu>
In-Reply-To: <4.1.19981004173910.00a14300@mail.oz.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 4 Oct 1998, Sam Zamarripa wrote:

> I have been busting my brain trying to figure this out and can't so thought
> I would ask here or maybe find out if what I'm trying to do can't be done
> at all.
> 
> Is there a way with IPFW to block all incoming icmp..mainly concerned about
> ping attacks..but at the same time still allow ME to use ping/traceroute
> from my machine.

Jeez, you didn't bust your brain too much, it's laid out on the manpage.
Simply block ICMP for everyone but allow it for your machine.

allow icmp from your-machine to me 
deny icmp from any to any

Doug White                               
Internet:  dwhite@resnet.uoregon.edu    | FreeBSD: The Power to Serve
http://gladstone.uoregon.edu/~dwhite    | www.freebsd.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.03.9810061417361.19930-100000>