From owner-freebsd-stable@FreeBSD.ORG  Thu Jun 24 23:50:49 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EE49816A4CE
	for <freebsd-stable@freebsd.org>;
	Thu, 24 Jun 2004 23:50:49 +0000 (GMT)
Received: from luskan.oddworld.com (luskan.oddworld.com [205.162.246.17])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8539843D46
	for <freebsd-stable@freebsd.org>;
	Thu, 24 Jun 2004 23:50:49 +0000 (GMT)
	(envelope-from khoi@oddworld.com)
Received: from hercules ([192.168.1.40]) by luskan.oddworld.com
          (Netscape Messaging Server 4.15) with ESMTP id HZU7KC00.4SF for
          <freebsd-stable@freebsd.org>; Thu, 24 Jun 2004 16:50:36 -0700 
From: "Khoi Dinh" <khoi@oddworld.com>
To: <freebsd-stable@freebsd.org>
Date: Thu, 24 Jun 2004 16:50:36 -0700
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
Thread-Index: AcRaRguKioKMgM5FSRuPC24EGOWE3Q==
Message-ID: <HZU7KC00.4SF@luskan.oddworld.com>
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.1
Subject: Disallowing ping and traceroute from outside
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: khoi@oddworld.com
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Jun 2004 23:50:50 -0000

Hi All,

How do I configure ipfw2 to allow ping and traceroute from my internal
network to the outside but not the other way around?

Thanks,
Khoi