From: SP K (spk_ie at domain yahoo.co.uk)
Date: Mon 31 Jul 2000 - 15:36:21 IST
ok but, what i really want to do is let icmp of type 3
in only and not any other icmp type.
Also i am having trouble with http out, i have all my
default policies as DENY , then i did ACCEPT for www
input and output, but i cant http in/out with this,
what else is need for http ?, thanks
--- Paul Jakma <paulj at domain itg.ie> wrote: > try
>
> ipchains -I input 1 -p icmp -j ACCEPT
> ipchains -I output 1 -p icmp -j ACCEPT
>
> On Mon, 31 Jul 2000, [iso-8859-1] SP K wrote:
>
> > Hi again, how do i allow icmp packets of type 3
> > [destination-unreachable] out, i tried:
> >
> > ./ipchains -A output -p icmp -s
> detination-unreachable
> > -j ALLOW
> >
> > but it wont work [the howto says: You can specify
> them
> > as ICMP names (use ipchains -h icmp to list the
> names)
> > after the `-s' option]
> >
> > , do i need this for a webserver incase it goes
> down
> > to let people know? Also do i need to allow MTU
> > into/out of a webserver for fragramentation (or do
> i
> > even need this)
> >
> > I am sorry for all these questions, but i have
> RTFM ;)
> >
> >
>
____________________________________________________________
> > Do You Yahoo!?
> > Get your free at domain yahoo.co.uk address at
> http://mail.yahoo.co.uk
> > or your free at domain yahoo.ie address at
> http://mail.yahoo.ie
> >
> >
>
____________________________________________________________
Do You Yahoo!?
Get your free at domain yahoo.co.uk address at http://mail.yahoo.co.uk
or your free at domain yahoo.ie address at http://mail.yahoo.ie
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:07:02 GMT