From owner-freebsd-security Thu Dec 24 06:56:28 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA08602 for freebsd-security-outgoing; Thu, 24 Dec 1998 06:56:28 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA08589 for ; Thu, 24 Dec 1998 06:56:22 -0800 (PST) (envelope-from des@flood.ping.uio.no) Received: (from des@localhost) by flood.ping.uio.no (8.9.1/8.9.1) id PAA75127; Thu, 24 Dec 1998 15:55:56 +0100 (CET) (envelope-from des) To: dima@best.net Cc: reichert@numachi.com (Brian Reichert), freebsd-security@FreeBSD.ORG Subject: Re: IPFW configuration question References: <199812240953.BAA19489@burka.rdy.com> From: Dag-Erling Smorgrav Date: 24 Dec 1998 15:55:55 +0100 In-Reply-To: dima@best.net's message of "Thu, 24 Dec 1998 01:53:51 -0800 (PST)" Message-ID: Lines: 12 X-Mailer: Gnus v5.5/Emacs 19.34 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org dima@best.net (Dima Ruban) writes: > Brian Reichert writes: > > You might want ping: > > $fwcmd add allow icmp from any to any > If you just want to use ping, I'd rather suggest specifying icmptypes/ I'm quite sure you'd want more than just ping. At the very least, you want to be able to receive (and optionally send) ICMP Unreachable. DES -- Dag-Erling Smorgrav - des@flood.ping.uio.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message