Date: Fri, 19 Oct 2001 15:29:19 +0100 From: slamdunk <slamdunk@neophile.net> To: security@freebsd.org Subject: Re: OT: Data Packet Filters? Message-ID: <5.1.0.14.2.20011019152713.00a937f8@pop3.neophile.net> In-Reply-To: <003101c1589e$061ceac0$0301a8c0@bigdaddy>
next in thread | previous in thread | raw e-mail | index | archive | help
This is from another list, maybe it will work on BSD echo 1 >/proc/sys/net/ipv4/icmp_echo_ignore_all To make it permanent, bung it in /etc/rc.d/rc.network, with other similar commands. Lets us know how you get on. Slammer At 06:00 19/10/2001 -0700, you wrote: >I'm hoping someone on this list will share his/her knowledge with me >even though this is somewhat off-topic. :) > >I am trying to deny ICMP echo reply packets on my 3Com 812 ADSL >modem/router. It appears that the only way to do this is to write a >data filter. The fields I need to determine are offset (bytes - which >I thought was 36 for ICMP code), length (bytes - I thought 1), Masked >(hex - appears that FF is to match data exactly), and data (hex - I >thought 0x0 echo reply). > >Can anyone get me pointed in the right direction? Any help or URLs >will be most appreciated. > >Thanks! > >Drew > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.1.0.14.2.20011019152713.00a937f8>