Outils personnels

Autoriser le ping sans ICMP : Différence entre versions

De wikiGite

(Page créée avec « To discard ICMP messages but still get a ping response (important for OpenVPN connections, etc.) just add the following to the file /etc/sysconfig/firewall.local add under ... »)
 
(Aucune différence)

Version actuelle datée du 8 avril 2011 à 15:42

To discard ICMP messages but still get a ping response (important for OpenVPN connections, etc.) just add the following to the file

/etc/sysconfig/firewall.local

add under “start”

# Drop icmp, but only after letting certain types through.
iptables -A CUSTOMINPUT -p icmp --icmp-type 0 -j ACCEPT
iptables -A CUSTOMINPUT -p icmp --icmp-type 3 -j ACCEPT
iptables -A CUSTOMINPUT -p icmp --icmp-type 11 -j ACCEPT
iptables -A CUSTOMINPUT -p icmp --icmp-type 8 -m limit --limit 1/second -j ACCEPT
iptables -A CUSTOMINPUT -p icmp -j DROP

To disallow pings let off rules 8 and 11.

Insert the rules with (will be then restarted automatically with IPFire)

./firewall.local start