From owner-freebsd-questions  Sun Apr 13 22:07:23 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id WAA15397
          for questions-outgoing; Sun, 13 Apr 1997 22:07:23 -0700 (PDT)
Received: from obiwan.aceonline.com.au (obiwan.aceonline.com.au [203.103.90.67])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id WAA15376;
          Sun, 13 Apr 1997 22:07:12 -0700 (PDT)
Received: from localhost (adrian@localhost)
	by obiwan.aceonline.com.au (8.8.5/8.8.5) with SMTP id MAA00633;
	Mon, 14 Apr 1997 12:55:03 +0800 (WST)
Date: Mon, 14 Apr 1997 12:55:02 +0800 (WST)
From: Adrian Chadd <adrian@obiwan.aceonline.com.au>
To: Anthony Barlow <tony@warp.co.uk>
cc: freebsd-questions@freebsd.org, freebsd-isp@freebsd.org
Subject: Re: Firewalling large ICMP packets..
In-Reply-To: <3.0.1.32.19970413211535.006b4954@mail.warp.co.uk>
Message-ID: <Pine.BSF.3.95q.970414125316.413E-100000@obiwan.aceonline.com.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> >I'm pretty sure the cisco 2501 could do that.. but I don't think this is
> >the list to ask how to play with IOS (unless of course, someone has
> >already done it :)
> 
> We use Livingston routers and all you need to do is put it in the filters
> rule deny 'deny icmp'
> 

Thats easy.
:)

ipfw add deny icmp from any to any (or something like that)

I'm trying to firewall large ICMP packets :)

Hmm.. if noone has a solution, its kernel-hacking time.
(joyous)

Thanks,

Adrian