OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: deny incoming icmp
From: Rashid N. Achilov (sheltonsentry.granch.ru)
Date: Thu Aug 17 2000 - 04:05:09 CDT

On 17-Aug-00 Erick Mechler wrote:
> First you have to enable firewalling code in your kernel. Once you've done
> that, the following two ipfw rules should do what you want:
>
> ipfw add deny icmp from any to any
> ipfw add allow icmp from ${oip} to any via ${oif}
>
> where ${oip} is the IP address of your outside interface, and ${oif} is the
> outside interface itself.
>

Sorry, more precision...

I have a firewall, protecting my network. IPFIREWALL, IPFIREWALL_VERBOSE, IPFIREWALL_FORWARD
enabled. What can I allow icmp from our network any deny/fake incoming to our network icmp? 

-- 
   With Best Regards.
   Rashid N. Achilov (RNA1-RIPE), Brainbench ID: 28514, Granch Ltd. lead engineer
   e-mail: achilovgranch.ru, tel (383-2) 24-2363

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message