Hello,

I need to be able to return specific ICMP responses to particular
connection attempts, instead of just "unreachable".  (say, "prohibited
by filter" or some such.


pf.conf(5) implies you can do this:

 return-icmp
           return-icmp6
                 This causes ICMP messages to be returned for packets which
                 match the rule.  By default this is an ICMP UNREACHABLE mes-
                 sage, however the this can be overridden by specifying a mes-
                 sage as a code or number.

But, try as I might, I cannot specify any ICMP message numbers on the
line.  Judging from Google, nobody else is trying to specify message 3
code 9 or such.  How do these need to be formatted?

Thanks!

==ml

-- 
Michael Lucas           [EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.oreillynet.com/pub/q/Big_Scary_Daemons

           Absolute BSD:   http://www.AbsoluteBSD.com/

Reply via email to