From owner-freebsd-questions Tue May 26 21:26:20 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id VAA16011 for freebsd-questions-outgoing; Tue, 26 May 1998 21:26:20 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from cybcon.com (root@cybcon.com [205.147.64.49]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id VAA15704 for ; Tue, 26 May 1998 21:24:26 -0700 (PDT) (envelope-from wwoods@cybcon.com) Received: from cybcon.com (IDENT:william@support1.cybcon.com [205.147.76.126]) by cybcon.com (8.9.0/8.9.0) with ESMTP id VAA28966; Tue, 26 May 1998 21:24:17 -0700 (PDT) Message-ID: <356B955C.E76C141A@cybcon.com> Date: Tue, 26 May 1998 21:23:56 -0700 From: William Woods X-Mailer: Mozilla 4.04 [en] (X11; I; FreeBSD 2.2.5-RELEASE i386) MIME-Version: 1.0 To: "J.A. Terranson" CC: FreeBSD Questions Subject: Re: firewall question... References: <01BD88F3.54B30210@w3svcs.mfn.org> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG OK, my theory behind this was blocking ping floods.....is this a legit way to stop em or not then.... J.A. Terranson wrote: > > ipfw add 100 deny icmp from any to any > > Note that this is NOT a good idea! Please choose the packets you > block very carefully, as some of them are actually needed! Simple > echo requests are no big deal to block, but things like redirects > and unavailables do you a favor! > > J.A. Terranson > sysadmin@mfn.org > > -----Original Message----- > From: William Woods [SMTP:wwoods@cybcon.com] > Sent: Tuesday, May 26, 1998 9:02 PM > To: FreeBSD Questions > Subject: firewall question... > > What would be the firewall rule to stop all incomming ICMP packets from > all? > > Bill > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message