From owner-freebsd-pf@FreeBSD.ORG Wed Aug 20 17:26:28 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7AE951065672 for ; Wed, 20 Aug 2008 17:26:28 +0000 (UTC) (envelope-from leslie@eskk.nu) Received: from hawk.thalamus.net (hawk.thalamus.net [212.31.160.3]) by mx1.freebsd.org (Postfix) with ESMTP id 3C0F38FC12 for ; Wed, 20 Aug 2008 17:26:28 +0000 (UTC) (envelope-from leslie@eskk.nu) Received: from localhost (localhost.thalamus.net [127.0.0.1]) by hawk.thalamus.net (Postfix) with ESMTP id C3E4D1EE8F6 for ; Wed, 20 Aug 2008 19:26:22 +0200 (CEST) X-Virus-Scanned: by amavisd-new at thalamus.net X-Spam-Flag: NO X-Spam-Score: 2.336 X-Spam-Level: ** X-Spam-Status: No, score=2.336 tagged_above=-999 required=4.2 tests=[AWL=-0.833, HELO_LH_HOME=3.169] Received: from hawk.thalamus.net ([127.0.0.1]) by localhost (hawk.thalamus.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b+Kdqye5k75l for ; Wed, 20 Aug 2008 19:26:16 +0200 (CEST) Received: from lesbsdpc.homenet.home (c-195-216-040-164.static.bjare.net [195.216.40.164]) by hawk.thalamus.net (Postfix) with ESMTP id 4E4491EE8A6 for ; Wed, 20 Aug 2008 19:26:16 +0200 (CEST) Message-ID: <48AC53BC.8040003@eskk.nu> Date: Wed, 20 Aug 2008 19:26:20 +0200 From: Leslie Jensen User-Agent: Thunderbird 2.0.0.16 (X11/20080729) MIME-Version: 1.0 To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Question about icmp X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Aug 2008 17:26:28 -0000 When setting up PF I found the recommendation to use the following rule to allow ICMP to pass. # macros icmp_types="echoreq" # filter rules pass in inet proto icmp all icmp-type $icmp_types keep state I do not understand why this is necessary! Will someone Please explain to me why it's necessary if I must have it, or if I can delete that rule. Thanks /Leslie