> On Tue, 6 Feb 2001, milunovic wrote:
> 
> > Is there anyway to deny echo request on FreeBSD (except ipfw add deny
> > icmp from any to any) ?
> > On Linux It was simple,just echo 1>/proc/.../icmp_echo_request
> 
>       If you just want to block echo_requests and don't want to
>       block any other ICMP why not use ipfw?
> 
>       ipfw add 1000 deny icmp from any to any in via xl0 icmptypes 8
> 
>       This will still allow other icmp to work...so why not use it?

Yes, indeed.  Just blocking all of ICMP will cause things like Path MTU
discovery to fail.

louie


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message

Reply via email to