From owner-freebsd-questions Sat May 27 11:18:37 1995 Return-Path: questions-owner Received: (from majordom@localhost) by freefall.cdrom.com (8.6.10/8.6.6) id LAA28774 for questions-outgoing; Sat, 27 May 1995 11:18:37 -0700 Received: from gvr.win.tue.nl (root@gvr.win.tue.nl [131.155.210.19]) by freefall.cdrom.com (8.6.10/8.6.6) with ESMTP id LAA28760 for ; Sat, 27 May 1995 11:18:34 -0700 Received: by gvr.win.tue.nl (8.6.10/1.53) id UAA24447; Sat, 27 May 1995 20:18:17 +0200 From: guido@gvr.win.tue.nl (Guido van Rooij) Message-Id: <199505271818.UAA24447@gvr.win.tue.nl> Subject: Re: IPFW - Docs?/Questions? To: nc@ai.net (Network Coordinator) Date: Sat, 27 May 1995 20:18:16 +0200 (MET DST) Cc: questions@FreeBSD.org In-Reply-To: from "Network Coordinator" at May 24, 95 12:52:04 pm X-Mailer: ELM [version 2.4 PL24] Content-Type: text Content-Length: 451 Sender: questions-owner@FreeBSD.org Precedence: bulk Network Coordinator wrote: > > > I have been tinkering with IPFW as of late noticing that > occassionally someone out there tries to ping -f a system or two over > here. What I would ideally like to do is deny all icmp packets from the > world as a general rule, but allow them from particular networks or > hosts. For example > > ipfw addf deny icmp from 255.255.255.255/32 to 198.69.44.1 ipfw addf deny icmp from 0/0 to 198.69.44.1 -Guido