"lpadumorvan" <[EMAIL PROTECTED]> writes:

> in mnf2 (same in mnf1)
> 
> the rules
> 
> ACCEPT "zone X" ------> fw     icmp   8
> 
> is non fonctionnal because in /etc/sysctl.conf
> 
> we have ever:
> 
> net.ipv4.icmp_echo_ignore_all = 1.
> 
> For allowed the ping to the fw, we must have: net.ipv4.icmp_echo_ignore_all = > 0
> 
> Why in webgui, in "zones interfaces/interfaces configuration" the checkbox 
> "noping" is not present ?

because the shorewall version is not the same and this option is now
obsolete in shorewall ... see shorewall.net for more infos about this
issue ...

 
> With the mnf1, i have configured net.ipv4.icmp_echo_ignore_all = 0 and i have 
> checked "noping" on any zone
> 
> Thanx
> 
> VUILLET D
> 

-- 
Florin                          http://www.mandrakesoft.com
                                http://people.mandrakesoft.com/~florin/

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

Reply via email to