Date: Wed, 8 Jul 1998 22:00:52 -0500 From: NOC-IPAD <sysadmin@greeves.mfn.org> To: NOC-IPAD <sysadmin@greeves.mfn.org>, "'Archie Cobbs'" <archie@whistle.com> Cc: "freebsd-hackers@FreeBSD.ORG" <freebsd-hackers@FreeBSD.ORG> Subject: RE: Specifying ICMP Subtypes to IPFW Message-ID: <01BDAABB.E0597FD0@noc.mfn.org>
next in thread | raw e-mail | index | archive | help
Hrmmm... OK. I may do that. I am surprised however, since IPFW *does* support subtypes in it's reporting: i.e., we routinely log packets such as "3.1" or "3.3". I am assuming of course that IPFW's use of the tag "3.1" is a reference to icmptype3, subtype 1; am I incorrect? Yours, J.A. Terranson sysadmin@mfn.org ---------- From: Archie Cobbs Sent: Wednesday, July 08, 1998 12:37 PM To: NOC-IPAD Cc: freebsd-hackers@FreeBSD.ORG Subject: Re: Specifying ICMP Subtypes to IPFW NOC-IPAD writes: > There has been a recent thread (mine) on "questions" which has > not been resolved - the last comment in this thread was from Doug White, > "No Idea...". > > I need to know how to specify an ICMP subtype to IPFW, for > instance, rather than killing *all* ICMPtype 3 messages using > > ipfw add 1 deny icmp from any to 123.123.123.0/24 icmptype 3 > > I need to kill only icmptype 3, subtype 11. How would I specify this? > > I have tried using icmptype 3.11, 3/11, 311, 3-11, etc... You must create a patch to add this functionality and apply it :-) :-) That is, ipfw doesn't currently support ICMP subtypes. -Archie ___________________________________________________________________________ Archie Cobbs * Whistle Communications, Inc. * http://www.whistle.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01BDAABB.E0597FD0>