Date: Sat, 10 Jun 2000 12:04:15 -0700 (PDT) From: Matthew Dillon <dillon@apollo.backplane.com> To: Greg Hormann <ghormann@alumni.indiana.edu> Cc: John F Cuzzola <vdrifter@ocis.ocis.net>, security@FreeBSD.ORG Subject: Re: Setting up simple firewall with ipfw Message-ID: <200006101904.MAA22680@apollo.backplane.com> References: <Pine.BSF.4.05.10006101434190.1793-100000@hormann.tzo.cc>
next in thread | previous in thread | raw e-mail | index | archive | help
You also need to allow ICMP messages through, or TCP will not be
able to do path-mtu-discovery. I usually let pings through as well.
add ..... allow icmp from any to any icmptypes 0,3,5,8,11,12,13,14
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200006101904.MAA22680>