Date: Sat, 29 Jun 2013 13:19:43 +0000 (UTC) From: Warren Block <wblock@FreeBSD.org> To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r42084 - head/en_US.ISO8859-1/books/handbook/firewalls Message-ID: <201306291319.r5TDJhVm078030@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: wblock Date: Sat Jun 29 13:19:43 2013 New Revision: 42084 URL: http://svnweb.freebsd.org/changeset/doc/42084 Log: Correct the example that allows internal but blocks external ICMP. Reviewed by: Peter N. M. Hansteen <peter@bsdly.net> Modified: head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml Modified: head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml Sat Jun 29 12:11:17 2013 (r42083) +++ head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml Sat Jun 29 13:19:43 2013 (r42084) @@ -1086,8 +1086,8 @@ rdr-anchor "ftp-proxy/*"</programlisting <acronym>ICMP</acronym> traffic from the local net through and stop probes from elsewhere at the gateway:</para> - <programlisting>pass inet proto icmp icmp-type $icmp_types from $localnet to any keep state -pass inet proto icmp icmp-type $icmp_types from any to $ext_if keep state</programlisting> + <programlisting>pass inet proto icmp from $localnet to any keep state +pass inet proto icmp from any to $ext_if keep state</programlisting> <para>Stopping probes at the gateway might be an attractive option anyway, but let us have a look at a few other
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201306291319.r5TDJhVm078030>