From owner-freebsd-questions  Sat Oct  5  6:51:24 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7FCEA37B401
	for <questions@FreeBSD.ORG>; Sat,  5 Oct 2002 06:51:23 -0700 (PDT)
Received: from sage-one.net (adsl-65-71-135-137.dsl.crchtx.swbell.net [65.71.135.137])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 60DBA43E4A
	for <questions@FreeBSD.ORG>; Sat,  5 Oct 2002 06:51:22 -0700 (PDT)
	(envelope-from jackstone@sage-one.net)
Received: from sagea (sagea [192.168.0.3])
	by sage-one.net (8.11.6/8.11.6) with SMTP id g95Dp5N77981;
	Sat, 5 Oct 2002 08:51:05 -0500 (CDT)
	(envelope-from jackstone@sage-one.net)
Message-Id: <3.0.5.32.20021005085103.011d62c0@mail.sage-one.net>
X-Sender: jackstone@mail.sage-one.net
X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32)
Date: Sat, 05 Oct 2002 08:51:03 -0500
To: "Patrick O'Reilly" <bsd@perimeter.co.za>, questions@FreeBSD.ORG,
	"master" <master@tyranz.com>
From: "Jack L. Stone" <jackstone@sage-one.net>
Subject: Re: block icmp with ipfw
In-Reply-To: <005d01c26c74$fdebf260$0200000a@perimeter.co.za>
References: <010501c26c6f$90eaecc0$0201a8c0@sebxp>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

At 03:41 PM 10.5.2002 +0200, Patrick O'Reilly wrote:
>From: "master" <master@tyranz.com>
>
>> hi all i would like to know the syntax of ipfw to block icmp ping ?
>(echo
>> and reply)
>
>ipfw add 123 deny ip from any to any icmtypes 8
>
>man ipfw and search for "icmptypes" .
>
>---
>Regards,
>Patrick O'Reilly.
>    ___        _            __

.... but if you still want to ping OUT....
${fwcmd} add pass icmp from any to any icmptypes 8 out via ${oif}

Best regards,
Jack L. Stone,
Administrator

SageOne Net
http://www.sage-one.net
jackstone@sage-one.net

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message