From owner-freebsd-security Fri Jun 22 16: 7:30 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.interactivate.com (mail.interactivate.com [63.141.73.15]) by hub.freebsd.org (Postfix) with ESMTP id 7B12C37B401 for ; Fri, 22 Jun 2001 16:07:26 -0700 (PDT) (envelope-from larry@interactivate.com) Received: (from root@localhost) by mail.interactivate.com (8.11.1/8.11.1) id f5MN8Q222871; Fri, 22 Jun 2001 16:08:26 -0700 (PDT) (envelope-from larry@interactivate.com) Received: from [192.168.1.21] (bofh [63.141.73.10]) by mail.interactivate.com (8.11.1/8.11.1av) with ESMTP id f5MN8JS22860; Fri, 22 Jun 2001 16:08:20 -0700 (PDT) (envelope-from larry@interactivate.com) Date: Fri, 22 Jun 2001 16:08:49 -0700 From: Lawrence Sica To: ohshutup@zdnetonebox.com, freebsd-security@freebsd.org Subject: Re: disable traceroute to my host Message-ID: <24425762.993226129@[192.168.1.21]> In-Reply-To: <20010622230217.JKT10107.mta05.onebox.com@onebox.com> References: <20010622230217.JKT10107.mta05.onebox.com@onebox.com> X-Mailer: Mulberry/2.1.0a5 (Win32 Demo) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Virus-Scanned: by AMaViS perl-10 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --On Friday, June 22, 2001 4:02 PM -0700 Kris Anderson wrote: > Now, if anybody knows of a more subtler way to allow ICMP out and back > in, but keep any externals from coming in I certainly am one who would > like to know. man 8 ipfw If you search for icmp you'll find the lsiting on icmptypes. You can specify what icmp to block and let through... --Larry To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message