Re: [cobalt-users] [Qube2] ICMP IP Filtering

[Mike Vanecek <nospam99@xxxxxxxxxxxx>]

On Thu, 27 Apr 2000 18:36:14 -0400 (EDT), Gordon
<root@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

:>On Thu, 27 Apr 2000, Mike Vanecek wrote:
:>> do what I want to do (ping from the intranet to the internet, but not allow
:>> the internet to ping the Qube2 - I am able to do one or the other, but not
:>> both at the same time)? 
:>
:>Well, what you are trying to do is discriminate between ICMP packet types,
:>which linux can do , you want to accept ICMP echo reply, but reject ICMP
:>echo request, ipfwadm can certainly do this from the command line, you
:>just add the ICMP message type as a number after the IP address (8 = echo
:>request, 0 = echo reply) the only real issue is if you can do it via the
:>GUI in a qube2, if not then cobalt might have to hack in a place for you
:>to type in the number -/

The GUI cannot do it, but I have no reservations about using ipfwadm directly
to change up the filters. I shall experiment with the ICMP type number and
see what I can figure out.  

Thank you very much for the advice.

Mike.