From owner-freebsd-questions Sun Oct 4 17:40:17 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA26241 for freebsd-questions-outgoing; Sun, 4 Oct 1998 17:40:17 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from UnixGod.Net.Sam (sense-sea-pm3-11.oz.net [216.39.133.75]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA26234 for ; Sun, 4 Oct 1998 17:40:11 -0700 (PDT) (envelope-from samz@oz.net) Received: from HellSpawn (HellSpawn.Net.Sam [10.0.0.2]) by UnixGod.Net.Sam (8.9.1a/8.9.1a) with SMTP id RAA03260 for ; Sun, 4 Oct 1998 17:39:45 -0700 (PDT) (envelope-from samz@oz.net) Message-Id: <4.1.19981004173910.00a14300@mail.oz.net> X-Sender: samz@mail.oz.net (Unverified) X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1 Date: Sun, 04 Oct 1998 17:39:44 -0700 To: freebsd-questions@FreeBSD.ORG From: Sam Zamarripa Subject: ipfw & icmp Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I have been busting my brain trying to figure this out and can't so thought I would ask here or maybe find out if what I'm trying to do can't be done at all. Is there a way with IPFW to block all incoming icmp..mainly concerned about ping attacks..but at the same time still allow ME to use ping/traceroute from my machine. I found an example after searching and while it blocked incoming perfectly, I could no longer use ping or traceroute from my machine OUT. So if there is a way, I would appreciate it if someone could inform me. Thanks. Sam To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message