看板FB_security
标 题Re: ipfw rules or something alike
发信站NCTU CSIE FreeBSD Server (Sat Sep 4 13:45:21 2004)
转信站ptt!FreeBSD.csie.NCTU!not-for-mail
> I use, thus far, "allow icmp from any to any icmptypes 0,3,4,8,11". That
> include 'echo request', of course. Someone else may have a better idea.
You want to be pinged? Why don't
you let something in and something
out? I.e.:
add 10000 allow icmp from any to any icmptypes 8 out
add 10100 allow icmp from any to any icmptypes 0 in
add 10200 allow icmp from any to any icmptypes 11 in
What kind of comp you wonna configure?
Best regards
ZK
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"