From owner-freebsd-questions Thu Dec 20 23: 6:31 2001 Delivered-To: freebsd-questions@freebsd.org Received: from catalyst.sasknow.net (catalyst.sasknow.net [207.195.92.130]) by hub.freebsd.org (Postfix) with ESMTP id 9324537B416 for ; Thu, 20 Dec 2001 23:06:28 -0800 (PST) Received: from localhost (ryan@localhost) by catalyst.sasknow.net (8.11.6/8.11.6) with ESMTP id fBL790g00450; Fri, 21 Dec 2001 01:09:01 -0600 (CST) (envelope-from ryan@sasknow.com) X-Authentication-Warning: catalyst.sasknow.net: ryan owned process doing -bs Date: Fri, 21 Dec 2001 01:09:00 -0600 (CST) From: Ryan Thompson X-X-Sender: To: Philip Hallstrom Cc: Lee Mark Mercado , Subject: Re: avoid ping In-Reply-To: <20011220222948.R19330-100000@teak.adhesivemedia.com> Message-ID: <20011221010222.R374-100000@catalyst.sasknow.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Philip Hallstrom wrote to Lee Mark Mercado: > You could configure your firewall to deny those icmp packets... Yes, but it should be pointed out that you almost certainly don't want to deny ALL ICMP traffic, as some of it is actually useful :-) Basically, man 8 ipfw, /icmptypes .. You will want to deny one or both of echo reply (ICMP type 0), and echo request (type 8). You might try something like the following. The command below will allow you to ping other hosts (and will allow the replies to come back), but will NOT allow echo requests to come IN to your machine/network: ipfw add 400 deny icmp from any to ${you} icmptype 8 Where ${you} is the public IP address of your machine, or network address of your subnet. Hope this helps! - Ryan > -philip > > On Thu, 20 Dec 2001, Lee Mark Mercado wrote: > > > > > > > how could i avoid being pinged ? i know theres no port for ping and it uses > > icmp - how could i avoid it then ? > > > > need help. thx > > > > _________________________________________________________________ > > Send and receive Hotmail on your mobile device: http://mobile.msn.com > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > -- Ryan Thompson Network Administrator, Accounts SaskNow Technologies - http://www.sasknow.com #106-380 3120 8th St E - Saskatoon, SK - S7H 0W2 Tel: 306-664-3600 Fax: 306-664-1161 Saskatoon Toll-Free: 877-727-5669 (877-SASKNOW) North America To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message