From owner-freebsd-hackers Wed Jul 8 15:01:24 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA05026 for freebsd-hackers-outgoing; Wed, 8 Jul 1998 15:01:24 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from greeves.mfn.org (greeves.mfn.org [204.238.179.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA04999 for ; Wed, 8 Jul 1998 15:01:17 -0700 (PDT) (envelope-from sysadmin@greeves.mfn.org) Received: from noc.mfn.org (noc.mfn.org [204.238.179.35]) by greeves.mfn.org (8.8.7/8.8.7) with SMTP id RAA00489; Wed, 8 Jul 1998 17:00:54 -0500 (CDT) (envelope-from sysadmin@mfn.org) Received: by noc.mfn.org with Microsoft Mail id <01BDAABB.E0597FD0@noc.mfn.org>; Wed, 8 Jul 1998 22:00:53 -0500 Message-ID: <01BDAABB.E0597FD0@noc.mfn.org> From: NOC-IPAD To: NOC-IPAD , "'Archie Cobbs'" Cc: "freebsd-hackers@FreeBSD.ORG" Subject: RE: Specifying ICMP Subtypes to IPFW Date: Wed, 8 Jul 1998 22:00:52 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hrmmm... OK. I may do that. I am surprised however, since IPFW *does* support subtypes in it's reporting: i.e., we routinely log packets such as "3.1" or "3.3". I am assuming of course that IPFW's use of the tag "3.1" is a reference to icmptype3, subtype 1; am I incorrect? Yours, J.A. Terranson sysadmin@mfn.org ---------- From: Archie Cobbs Sent: Wednesday, July 08, 1998 12:37 PM To: NOC-IPAD Cc: freebsd-hackers@FreeBSD.ORG Subject: Re: Specifying ICMP Subtypes to IPFW NOC-IPAD writes: > There has been a recent thread (mine) on "questions" which has > not been resolved - the last comment in this thread was from Doug White, > "No Idea...". > > I need to know how to specify an ICMP subtype to IPFW, for > instance, rather than killing *all* ICMPtype 3 messages using > > ipfw add 1 deny icmp from any to 123.123.123.0/24 icmptype 3 > > I need to kill only icmptype 3, subtype 11. How would I specify this? > > I have tried using icmptype 3.11, 3/11, 311, 3-11, etc... You must create a patch to add this functionality and apply it :-) :-) That is, ipfw doesn't currently support ICMP subtypes. -Archie ___________________________________________________________________________ Archie Cobbs * Whistle Communications, Inc. * http://www.whistle.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message