Date: Sat, 5 Oct 2002 21:41:09 +0300 (EEST) From: Giorgos Keramidas <keramida@freebsd.org> To: "Jack L. Stone" <jackstone@sage-one.net> Cc: "Patrick O'Reilly" <bsd@perimeter.co.za>, <questions@freebsd.org>, master <master@tyranz.com> Subject: Re: block icmp with ipfw Message-ID: <20021005213833.K35489-100000@hades> In-Reply-To: <3.0.5.32.20021005085103.011d62c0@mail.sage-one.net>
index | next in thread | previous in thread | raw e-mail
On 2002-10-05 08:51, Jack L. Stone wrote:
> At 03:41 PM 10.5.2002 +0200, Patrick O'Reilly wrote:
> >From: "master" <master@tyranz.com>
> > > hi all i would like to know the syntax of ipfw to block icmp ping?
> > > (echo and reply)
> >
> > ipfw add 123 deny ip from any to any icmtypes 8
>
> .... but if you still want to ping OUT....
> ${fwcmd} add pass icmp from any to any icmptypes 8 out via ${oif}
That will negate the effect of any firewall rules that "block" icmp
packets though, i.e. it's the opposite of what was asked :-)
--
keramida@FreeBSD.org -==- FreeBSD: The Power to Serve
FreeBSD 5.0-CURRENT #3: Wed Oct 2 04:55:42 EEST 2002
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021005213833.K35489-100000>