From owner-freebsd-security  Sun Jun 24 10:40:28 2001
Delivered-To: freebsd-security@freebsd.org
Received: from silky.kgr-sp.si (silky.kgr-sp.si [212.30.95.172])
	by hub.freebsd.org (Postfix) with ESMTP id 1835237B401
	for <freebsd-security@freebsd.org>; Sun, 24 Jun 2001 10:40:25 -0700 (PDT)
	(envelope-from simon@inforta.com)
Received: from inforta.com (rooky.backnet [192.168.0.2])
	by silky.kgr-sp.si (Postfix) with ESMTP id 3AEF1E2C88
	for <freebsd-security@freebsd.org>; Sun, 24 Jun 2001 19:38:25 +0200 (CEST)
Message-ID: <3B36267B.5B5FDBE@inforta.com>
Date: Sun, 24 Jun 2001 19:42:19 +0200
From: Simon Rakovec <simon@inforta.com>
X-Mailer: Mozilla 4.77 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-security@freebsd.org
Subject: Re: disable traceroute to my host
References: <006a01c0fb6b$2d64d830$9865fea9@book>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Try this:

ipfw add deny udp from any 32769-65535 to <your-host> 33434-33523

Regards, Simon

alexus wrote:
> 
> is it possible to disable using ipfw so people won't be able to traceroute
> me?
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message