lkml.org 
[lkml]   [1997]   [Sep]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: IP fragmentation problem in the 2.0 kernels ?
Date
On Wed, 10 Sep 1997 00:12:03 -0400 (EDT), 
Jon Lewis <jlewis@inorganic5.fdt.net> wrote:
>Is there a way (using kernel 2.0.x) to block types of icmp with the
>firewalling code? i.e. say I have a multiport linux router and want to
>block just icmp echo request and echo reply. Is there an easy way to do
>it?

ipfwadm -I -i deny -P icmp -S 0.0.0.0/0 8 -D 0.0.0.0/0 -W eth0
ipfwadm -I -i deny -P icmp -S 0.0.0.0/0 0 -D 0.0.0.0/0 -W eth0

Requires 2.0.29 with suitable patches or 2.0.30+ (pre-2.0.31-9
recommended, some masq fixes were missed in 2.0.30). Turn masquerade
ICMP on. You also need a copy of ipfwadm that understands -P icmp.
See http://www.wwonline.com/~achau/ipmasq.



\
 
 \ /
  Last update: 2005-03-22 13:40    [W:0.050 / U:0.468 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site