Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 26 May 2002 13:52:46 +0200
From:      "Retal" <lirandb@netvision.net.il>
To:        <freebsd-ipfw@freebsd.org>
Subject:   Unreach flag
Message-ID:  <004701c204ab$db0e2050$668ce650@main1>

next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.

------=_NextPart_000_0042_01C204BC.9DE29470
Content-Type: text/plain;
	charset="windows-1255"
Content-Transfer-Encoding: quoted-printable

Hi..=20

There's sometimes i just can't figure out:

  When im adding those rules to my IPFW:

00001     7     392 allow icmp from 80.230.140.105 to any
00002    10     576 unreach host icmp from any to any

and after it i ping my fbsd box from another IP i get this:

Reply from 80.230.140.105: Destination host unreachable.
Reply from 80.230.140.105: Destination host unreachable.
Reply from 80.230.140.105: Destination host unreachable.
Reply from 80.230.140.105: Destination host unreachable.


whats this unreach option used for/useful for .. and is it matter if i =
use host, filter-prohib or any other flags.. ?

Thanks.. Retal (retaly@inter.net.il)

------=_NextPart_000_0042_01C204BC.9DE29470
Content-Type: text/html;
	charset="windows-1255"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dwindows-1255">
<META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hi.. </FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>There's sometimes i just can't figure=20
out:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>&nbsp; When im adding those rules to my =

IPFW:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>00001&nbsp;&nbsp;&nbsp;&nbsp;=20
7&nbsp;&nbsp;&nbsp;&nbsp; 392 allow icmp from 80.230.140.105 to=20
any<BR>00002&nbsp;&nbsp;&nbsp; 10&nbsp;&nbsp;&nbsp;&nbsp; 576 unreach =
host icmp=20
from any to any</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>and after it i ping my fbsd box from =
another IP i=20
get this:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Reply from 80.230.140.105: Destination =
host=20
unreachable.<BR>Reply from 80.230.140.105: Destination host=20
unreachable.<BR>Reply from 80.230.140.105: Destination host=20
unreachable.<BR>Reply from 80.230.140.105: Destination host=20
unreachable.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>whats this unreach option used =
for/useful=20
for&nbsp;.. and is it matter if i use host, filter-prohib or any other =
flags..=20
?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Thanks.. Retal (<A=20
href=3D"mailto:retaly@inter.net.il">retaly@inter.net.il</A>)</FONT></DIV>=
</BODY></HTML>

------=_NextPart_000_0042_01C204BC.9DE29470--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?004701c204ab$db0e2050$668ce650>