From owner-freebsd-questions@FreeBSD.ORG  Fri Jul 28 03:16:35 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9E17616A4DF
	for <freebsd-questions@freebsd.org>;
	Fri, 28 Jul 2006 03:16:35 +0000 (UTC) (envelope-from freebsd@hub.org)
Received: from hub.org (hub.org [200.46.204.220])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2C75043D46
	for <freebsd-questions@freebsd.org>;
	Fri, 28 Jul 2006 03:16:35 +0000 (GMT) (envelope-from freebsd@hub.org)
Received: from localhost (mx1.hub.org [200.46.208.251])
	by hub.org (Postfix) with ESMTP id C16BA290C6A
	for <freebsd-questions@freebsd.org>;
	Fri, 28 Jul 2006 00:16:29 -0300 (ADT)
Received: from hub.org ([200.46.204.220])
	by localhost (mx1.hub.org [200.46.208.251]) (amavisd-new, port 10024)
	with ESMTP id 92180-03 for <freebsd-questions@freebsd.org>;
	Fri, 28 Jul 2006 00:16:29 -0300 (ADT)
Received: from ganymede.hub.org (blk-224-179-167.eastlink.ca [24.224.179.167])
	by hub.org (Postfix) with ESMTP id 5C169291B16
	for <freebsd-questions@freebsd.org>;
	Fri, 28 Jul 2006 00:15:57 -0300 (ADT)
Received: by ganymede.hub.org (Postfix, from userid 1027)
	id 8DEB15C9CE; Fri, 28 Jul 2006 00:15:31 -0300 (ADT)
Received: from localhost (localhost [127.0.0.1])
	by ganymede.hub.org (Postfix) with ESMTP id 8CF155C9CD
	for <freebsd-questions@freebsd.org>;
	Fri, 28 Jul 2006 00:15:31 -0300 (ADT)
Date: Fri, 28 Jul 2006 00:15:31 -0300 (ADT)
From: User Freebsd <freebsd@hub.org>
To: freebsd-questions@freebsd.org
Message-ID: <20060728001202.W17979@ganymede.hub.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Subject: icmp packets - disabling via sysctl, or cisco switch ... ?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Jul 2006 03:16:35 -0000


Two part question here ...

first part ... is there a way of just disabling icmp by setting a sysctl, 
so that a server just doesn't respond to them?

second part ... is there a way of telling a cisco switch to drop all icmp 
packets, preferrably to all but an exception list, but to everywhere works 
as well ...

I'm running a Cisco 2950-24 ...

thanks ...

----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email . scrappy@hub.org                              MSN . scrappy@hub.org
Yahoo . yscrappy               Skype: hub.org        ICQ . 7615664