Re: [cobalt-users] [Qube2] ICMP IP Filtering

[Gordon <root@xxxxxxxxxxxxxxxxxxxxxxx>]

On Thu, 27 Apr 2000, Mike Vanecek wrote:
> do what I want to do (ping from the intranet to the internet, but not allow
> the internet to ping the Qube2 - I am able to do one or the other, but not
> both at the same time)? 

Well, what you are trying to do is discriminate between ICMP packet types,
which linux can do , you want to accept ICMP echo reply, but reject ICMP
echo request, ipfwadm can certainly do this from the command line, you
just add the ICMP message type as a number after the IP address (8 = echo
request, 0 = echo reply) the only real issue is if you can do it via the
GUI in a qube2, if not then cobalt might have to hack in a place for you
to type in the number -/