From owner-freebsd-net Mon Mar 18 13: 8:41 2002 Delivered-To: freebsd-net@freebsd.org Received: from mx2.nersc.gov (mx2.nersc.gov [128.55.6.22]) by hub.freebsd.org (Postfix) with ESMTP id D426E37B497 for ; Mon, 18 Mar 2002 13:07:38 -0800 (PST) Received: from gemini.nersc.gov (gemini.nersc.gov [128.55.16.111]) by mx2.nersc.gov (Postfix) with ESMTP id 8ED115924; Mon, 18 Mar 2002 13:07:38 -0800 (PST) Received: from gemini.nersc.gov (localhost [127.0.0.1]) by gemini.nersc.gov (Postfix) with ESMTP id 24C2B3B1AB; Mon, 18 Mar 2002 13:07:38 -0800 (PST) X-Mailer: exmh version 2.5 07/13/2001 with nmh-1.0.4 To: "Peter Brezny" Cc: freebsd-net@FreeBSD.ORG Subject: Re: icmp 5 In-Reply-To: Message from "Peter Brezny" of "Mon, 18 Mar 2002 14:33:34 EST." Mime-Version: 1.0 Content-Type: multipart/signed; boundary="==_Exmh_-1981109936P"; micalg=pgp-sha1; protocol="application/pgp-signature" Content-Transfer-Encoding: 7bit Date: Mon, 18 Mar 2002 13:07:38 -0800 From: Eli Dart Message-Id: <20020318210738.24C2B3B1AB@gemini.nersc.gov> Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --==_Exmh_-1981109936P Content-Type: text/plain; charset=us-ascii less /usr/include/netinet/ip_icmp.h The stuff that I think you want starts around line 135. Looking at a copy of Stevens TCP/IP Illustrated vol. 1 might also help, but I always just read the header file to find out what's what. --eli In reply to "Peter Brezny" : > Hi Everyone, > > Where can i find an explanation of the different icmp types. > > I ran across some standard firewall rulesets that say these types are > required: > # Allow required ICMP > $fwcmd add allow icmp from any to any icmptypes 3,4,11,12 keep-state > > And now I've got a cisco router that's wanting a response from an icmp type > 5. > > What is type 5 for, and where can i get some more info on the different > types in an icmp packet. > > Well, I just partly answered my question with a quick google search for icmp > type > > http://www.iana.org/assignments/icmp-parameters > > > However, I'm still needing some more info. Why would my router be sending > redirect ICMP info to this host? > > And are the required ICMP types in the firewall rule above really adequate? > > Here's what's showing up in the system report: > > ipfw: 65435 Deny ICMP:5.0 router.ip.address host.ip.adress in via xl0 > > Where the host has only the following icmp types allowed. > > # Allow required ICMP > $fwcmd add allow icmp from any to any icmptypes 3,4,11,12 keep-state > > Thanks, > > Peter Brezny > purplecat.net > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message --==_Exmh_-1981109936P Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: This is a comment. iD8DBQE8llcaLTFEeF+CsrMRAprpAKDiV+B5ACaCKeKwN8RRs3Apk9pskACfUPvs 7t3ELaDQV2Lw2UwU2DLJud8= =8nVP -----END PGP SIGNATURE----- --==_Exmh_-1981109936P-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message