Date: Fri, 28 Dec 2001 13:10:21 -0500 From: "Joe & Fhe Barbish" <barbish@a1poweruser.com> To: "Ryan Thompson" <ryan@sasknow.com> Cc: "FBSD Questions" <questions@FreeBSD.ORG>, <philip@adhesivemedia.com>, <mercadolee@hotmail.com> Subject: RE: avoid ping Message-ID: <LPBBIGIAAKKEOEJOLEGOOEKACKAA.barbish@a1poweruser.com> In-Reply-To: <20011221010222.R374-100000@catalyst.sasknow.net>
next in thread | previous in thread | raw e-mail | index | archive | help
You responded
ipfw add 400 deny icmp from any to ${you} icmptype 8
Where ${you} is the public IP address of your machine, or network
address of your subnet.
I respond.
${you} is the static IP address issued by your ISP. How do I get
this value if my ISP does dynamic IP assignments?
Thanks
Joe
-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG
[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Ryan Thompson
Sent: Friday, December 21, 2001 2:09 AM
To: Philip Hallstrom
Cc: Lee Mark Mercado; freebsd-questions@FreeBSD.ORG
Subject: Re: avoid ping
Philip Hallstrom wrote to Lee Mark Mercado:
> You could configure your firewall to deny those icmp packets...
Yes, but it should be pointed out that you almost certainly don't want
to deny ALL ICMP traffic, as some of it is actually useful :-)
Basically, man 8 ipfw, /icmptypes .. You will want to deny one or both
of echo reply (ICMP type 0), and echo request (type 8).
You might try something like the following. The command below will
allow you to ping other hosts (and will allow the replies to come
back), but will NOT allow echo requests to come IN to your
machine/network:
ipfw add 400 deny icmp from any to ${you} icmptype 8
Where ${you} is the public IP address of your machine, or network
address of your subnet.
Hope this helps!
- Ryan
> -philip
>
> On Thu, 20 Dec 2001, Lee Mark Mercado wrote:
>
> >
> >
> > how could i avoid being pinged ? i know theres no port for ping and it
uses
> > icmp - how could i avoid it then ?
> >
> > need help. thx
> >
> > _________________________________________________________________
> > Send and receive Hotmail on your mobile device: http://mobile.msn.com
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
> >
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>
--
Ryan Thompson <ryan@sasknow.com>
Network Administrator, Accounts
SaskNow Technologies - http://www.sasknow.com
#106-380 3120 8th St E - Saskatoon, SK - S7H 0W2
Tel: 306-664-3600 Fax: 306-664-1161 Saskatoon
Toll-Free: 877-727-5669 (877-SASKNOW) North America
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?LPBBIGIAAKKEOEJOLEGOOEKACKAA.barbish>