From owner-freebsd-stable Mon Jun 19 5:11:27 2000 Delivered-To: freebsd-stable@freebsd.org Received: from csmd2.cs.uni-magdeburg.de (csmd2.CS.Uni-Magdeburg.De [141.44.22.2]) by hub.freebsd.org (Postfix) with ESMTP id D1B4337B739 for ; Mon, 19 Jun 2000 05:11:20 -0700 (PDT) (envelope-from jesse@mail.CS.Uni-Magdeburg.De) Received: from knecht.cs.uni-magdeburg.de (jesse@knecht [141.44.21.3]) by csmd2.cs.uni-magdeburg.de (8.9.3/8.9.3) with ESMTP id OAA16454 for ; Mon, 19 Jun 2000 14:11:18 +0200 (MET DST) Received: (from jesse@localhost) by knecht.cs.uni-magdeburg.de (8.8.8+Sun/8.8.8) id OAA04447; Mon, 19 Jun 2000 14:10:33 +0200 (MET DST) X-Authentication-Warning: knecht.cs.uni-magdeburg.de: jesse set sender to jesse@cs.uni-magdeburg.de using -f To: freebsd-stable@FreeBSD.ORG Subject: Re: hosts.allow: deny set but ping requests come through References: From: Roland Jesse In-Reply-To: Tobias Roth's message of "Mon, 19 Jun 2000 13:13:45 +0200 (MET DST)" Date: 19 Jun 2000 14:10:33 +0200 Message-ID: <0v1z1tx45i.fsf@cs.uni-magdeburg.de> Lines: 16 User-Agent: Gnus/5.0803 (Gnus v5.8.3) Emacs/20.4 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Tobias Roth writes: > Your tcp dump says that you send out an ICMP reply. ICMP != tcp. Correct. "Dan Larsson" writes: > These have nothing to do with icmp restrictions, use firewall rules > to limit icmp: 'man 8 ipfw' Good point and thanks for the pointer. Now it is way more restrictive than I wanted it to be but at least the ping requests from the specific machine in question don't get answered anymore. Roland To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message