Date: Mon, 4 Jan 1999 14:19:59 -0800 (PST) From: Mike Meyer <mwm@phone.net> To: Stuart Henderson <stuart@eclipse.net.uk> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Can ipfw filter only certain codes within an icmp type? Message-ID: <Pine.BSF.4.05.9901041418020.22104-100000@guru.phone.net> In-Reply-To: <3690D4C1.B37FE486@eclipse.net.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
I don't believe so. On the other hand, given that getting traceroute to work requires a very open attitude towards outbound TCP, why not just let all the ICMP_UNREACH message types through? <mike On Mon, 4 Jan 1999, Stuart Henderson wrote: > Date: Mon, 04 Jan 1999 14:48:33 +0000 > From: Stuart Henderson <stuart@eclipse.net.uk> > To: freebsd-questions@FreeBSD.ORG > Subject: Can ipfw filter only certain codes within an icmp type? > > I'm trying to configure an ipfw to filter most > ICMP_UNREACH (icmptype 3) messages but allow > ICMP_UNREACH_PORT (type=3,code=3) through (so > that traceroute still works). Is this possible > without local patches? > > Thanks in advance, > Stuart > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9901041418020.22104-100000>