Joseph Lappa <[EMAIL PROTECTED]> writes:
> icmpv4_types = "{ echorep, host-unr, needfrag }"
> pass inet proto icmp all icmp-type $icmpv4_types keep state
according to my /usr/src/sbin/pfctl/pfctl_parser.c, you probably need
'unreach' instead of 'host-unr' in your types list. If you use a list
of icmp codes too, 'host-unr' would be a valid member of your list of
codes.
--
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
"First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
