Re: [cobalt-users] [Qube2] ICMP IP Filtering

[Mike Vanecek <nospam99@xxxxxxxxxxxx>]

On Sun, 30 Apr 2000 10:39:30 -0700, "Clyde McQueen" <mcqueen@xxxxxxxxxxxxx>
wrote:

:>The interface name is either eth0 (same as Primary) or eth1 (same as
:>Secondary). In your case - since you're using both interfaces - you'd
:>specify eth1. For confirmation, check out
:>/etc/sysconfig/network-scripts/ifcfg-ethX, where X is 0 or 1.
:>
:>However, having said that I'm frankly not sure if the behavior would be
:>different from using -V <ip>. Worth trying, I suppose.

The following results in a ping timeout to the server,

     ipfwadm -I -a deny -P icmp -S 0/0 8 -W eth1

but allows all stations and the server to ping out. Of course, it does not
show up in the GUI IP filter rule list which may explain why the Cobalt
Customer Service rep did not to give me instructions or advice on how to do
it. Maybe Cobalt needs to improve the GUI IP Filter list to include ICMP
type.

Such a simple solution once you know how. I had read the man several times,
but it just did not make sense until I read the replies to my post.

My thanks to all that provided assistance and advice. 

Mike.