From owner-freebsd-questions  Sun Apr 13 22:58:31 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id WAA17676
          for questions-outgoing; Sun, 13 Apr 1997 22:58:31 -0700 (PDT)
Received: from l321.omsk.net.ru (pppl321.omsk.net.ru [194.226.32.34])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id WAA17601;
          Sun, 13 Apr 1997 22:57:11 -0700 (PDT)
Received: from l321.omsk.net.ru (FreeBSD-1.l321.omsk.net.ru [194.226.33.65])
          by l321.omsk.net.ru (8.8.5/8.8.5) with SMTP
	  id MAA17367; Mon, 14 Apr 1997 12:49:00 +0700 (OSD)
Date: Mon, 14 Apr 1997 12:49:00 +0700 (OSD)
From: Eugeny Kuzakov <kev@l321.omsk.net.ru>
To: Adrian Chadd <adrian@obiwan.aceonline.com.au>
cc: Anthony Barlow <tony@warp.co.uk>, freebsd-questions@freebsd.org,
        freebsd-isp@freebsd.org
Subject: Re: Firewalling large ICMP packets..
In-Reply-To: <Pine.BSF.3.95q.970414125316.413E-100000@obiwan.aceonline.com.au>
Message-ID: <Pine.BSD.3.95.970414124611.17294B-100000@l321.omsk.net.ru>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

On Mon, 14 Apr 1997, Adrian Chadd wrote:

> Date: Mon, 14 Apr 1997 12:55:02 +0800 (WST)
> From: Adrian Chadd <adrian@obiwan.aceonline.com.au>
> To: Anthony Barlow <tony@warp.co.uk>
> Cc: freebsd-questions@freebsd.org, freebsd-isp@freebsd.org
> Subject: Re: Firewalling large ICMP packets..
> 
> ipfw add deny icmp from any to any (or something like that)
> 
> I'm trying to firewall large ICMP packets :)

You may also deny all frag packets. In ipfilter by Darren Red it's simple.
May I right ?

	Best wishes, Eugeny Kuzakov
		Laboratory 321 ( Omsk, Russia )
		kev@l321.omsk.net.ru