Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Jun 2001 16:08:49 -0700
From:      Lawrence Sica <larry@interactivate.com>
To:        ohshutup@zdnetonebox.com, freebsd-security@freebsd.org
Subject:   Re: disable traceroute to my host
Message-ID:  <24425762.993226129@[192.168.1.21]>
In-Reply-To: <20010622230217.JKT10107.mta05.onebox.com@onebox.com>
References:   <20010622230217.JKT10107.mta05.onebox.com@onebox.com>

next in thread | previous in thread | raw e-mail | index | archive | help


--On Friday, June 22, 2001 4:02 PM -0700 Kris Anderson 
<ohshutup@zdnetmail.com> wrote:

> Now, if anybody knows of a more subtler way to allow ICMP out and back
> in, but keep any externals from coming in I certainly am one who would
> like to know.

man 8 ipfw

If you search for icmp you'll find the lsiting on icmptypes.  You can 
specify what icmp to block and let through...

--Larry



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?24425762.993226129>