Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Mar 2001 20:54:39 -0600 (CST)
From:      Nick Rogness <nick@rogness.net>
To:        Sean Chittenden <sean-freebsd-ipfw@chittenden.org>
Cc:        alexus <ml@db.nexgen.com>, freebsd-ipfw@FreeBSD.ORG
Subject:   Re: your mail
Message-ID:  <Pine.BSF.4.21.0103302049460.86494-100000@cody.jharris.com>
In-Reply-To: <20010330184049.C423@rand.tgd.net>

next in thread | previous in thread | raw e-mail | index | archive | help

On Fri, 30 Mar 2001, Sean Chittenden wrote:

> 	Please correct me if I'm wrong, but if you're on the system,
> how are you going to get a ping response back?  -sc

For outgoing:

ipfw add allow icmp from YOUR_FIREWALL to any out via fxp0 icmptypes 8
ipfw add deny icmp from any to any out via fxp0 icmptypes 8

For incoming:

ipfw add allow icmp from any to YOUR_FIREWALL in via fxp0 icmptypes 8
ipfw add deny icmp from any to any in via fxp0 icmptypes 8

Of course, this depends on how your machine and network is setup.


> > 
> > On Fri, 30 Mar 2001, alexus wrote:
> > 
> > > how can i disable incoming ping of my box?
> > 
> > 	Yes:
> > 
> > 	ipfw add deny icmp from any to any in via fxp0 icmptypes 8
> > 
> > > 
> > > is it possible disable outgoing and enable incoming?
> > > 
> > 
> > 	Yes, it is:
> > 
> > 	ipfw add deny icmp from any to any out via fxp0 icmptypes 8
> > 

Nick Rogness <nick@rogness.net>
 - Keep on Routing in a Free World...
 "FreeBSD: The Power to Serve!"



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0103302049460.86494-100000>