ICMP types

Ken Hilliard ken at acotec.com
Fri Apr 29 21:49:33 CEST 2005


In reading different firewall scripts/tutorials many of them recommend
filtering ICMP packets. I added ICMP filter in my firewall but was
unsure of the value as well. What is the consensus view out there?

-----Original Message-----
From: netfilter-bounces at lists.netfilter.org
[mailto:netfilter-bounces at lists.netfilter.org] On Behalf Of Sertys
Sent: Saturday, April 30, 2005 5:29 PM
To: Netfilter list
Subject: Re: ICMP types

On Sat, 30 Apr 2005 14:53:23 +0500, <varun_saa at vsnl.net> wrote:

http://www.iana.org/assignments/icmp-parameters
Use this URL to learn more about the ICMP protocol. It's an interesting

reading. I wouldn't consider forbidding ICMP at all unless you've go
dDoS  
attacks on ICMP(like microsoft). It's a control message protocol anyway.

> Hello,
>       As I understand there are more one
> type of ICMP ping.
>
> What are these types and should they
> all be allowed in iptables rules ?
>
> Thanks
>
> Varun
>



-- 
www.supportivo.org

I can't stop myself checking for pigs in the outlets. Everybody thinks
i'm  
a punk, cause of the hairstyle(220V).
end






More information about the netfilter mailing list