Re: [ILUG] ipchains - icmp [almost working]

From: Paul Jakma (paulj at domain itg.ie)
Date: Mon 31 Jul 2000 - 14:56:05 IST


try

ipchains -I input 1 -p icmp -j ACCEPT
ipchains -I output 1 -p icmp -j ACCEPT

On Mon, 31 Jul 2000, [iso-8859-1] SP K wrote:

> Hi again, how do i allow icmp packets of type 3
> [destination-unreachable] out, i tried:
>
> ./ipchains -A output -p icmp -s detination-unreachable
> -j ALLOW
>
> but it wont work [the howto says: You can specify them
> as ICMP names (use ipchains -h icmp to list the names)
> after the `-s' option]
>
> , do i need this for a webserver incase it goes down
> to let people know? Also do i need to allow MTU
> into/out of a webserver for fragramentation (or do i
> even need this)
>
> I am sorry for all these questions, but i have RTFM ;)
>
> ____________________________________________________________
> Do You Yahoo!?
> Get your free at domain yahoo.co.uk address at http://mail.yahoo.co.uk
> or your free at domain yahoo.ie address at http://mail.yahoo.ie
>
>



This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:07:02 GMT