Date: Wed, 27 Feb 2002 23:23:54 +0100 From: Alex Kiesel <freebsd@document-root.de> To: "Peter C. Lai" <sirmoo@cowbert.2y.net> Cc: freebsd-security@freebsd.org Subject: Re: allowing icmp still doesn't allow traceroute Message-ID: <20020227222354.GC36724@schlund.de> In-Reply-To: <20020227170928.A54682@cowbert.2y.net> References: <20020227170928.A54682@cowbert.2y.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Feb 27, 2002, Peter C. Lai wrote: > I have: > 00600 allow icmp from any to any > > for ipfw, and i still get sendto Permission denied when > I try to traceroute. > > I later also explicitly defined icmptypes 0,3,8,11,13 > and this does not solve the problem. > > any suggestions? Hi Peter, use this: 03900 allow udp from any to any 33434-33523 Alex -- Alex Kiesel PGP Key: 0x09F4FA11 Todays excuse: ATM cell has no roaming feature turned on, notebooks can't connect To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020227222354.GC36724>