https://wiki.kogite.fr/index.php?action=history&feed=atom&title=Autoriser_le_ping_sans_ICMPAutoriser le ping sans ICMP - Historique des versions2026-06-10T06:40:47ZHistorique des versions pour cette page sur le wikiMediaWiki 1.30.0https://wiki.kogite.fr/index.php?title=Autoriser_le_ping_sans_ICMP&diff=3298&oldid=prevFrank : Page créée avec « To discard ICMP messages but still get a ping response (important for OpenVPN connections, etc.) just add the following to the file /etc/sysconfig/firewall.local add under ... »2011-04-08T15:42:07Z<p>Page créée avec « To discard ICMP messages but still get a ping response (important for OpenVPN connections, etc.) just add the following to the file /etc/sysconfig/firewall.local add under ... »</p>
<p><b>Nouvelle page</b></p><div>To discard ICMP messages but still get a ping response (important for OpenVPN connections, etc.) just add the following to the file<br />
/etc/sysconfig/firewall.local<br />
add under “start”<br />
<br />
# Drop icmp, but only after letting certain types through.<br />
iptables -A CUSTOMINPUT -p icmp --icmp-type 0 -j ACCEPT<br />
iptables -A CUSTOMINPUT -p icmp --icmp-type 3 -j ACCEPT<br />
iptables -A CUSTOMINPUT -p icmp --icmp-type 11 -j ACCEPT<br />
iptables -A CUSTOMINPUT -p icmp --icmp-type 8 -m limit --limit 1/second -j ACCEPT<br />
iptables -A CUSTOMINPUT -p icmp -j DROP<br />
<br />
To disallow pings let off rules 8 and 11.<br />
<br />
Insert the rules with (will be then restarted automatically with IPFire)<br />
./firewall.local start</div>Frank