Re: ICMP on a firewall

[User nawk <nawk () real-secure com>]

Hi,

    I like looking at OpenBSD's IPF sample configuration. The URL is
http://coombs.anu.edu.au/~avalon/examples.html#responses . You can look at
the icmp area and the just add ip group-list in to your Ethernet interface.
The samples they use on this page is very effective.


----- Original Message -----
From: "Jan Stifter" <j.stifter () medres ch>
To: <firewall-wizards () nfr net>
Sent: Tuesday, May 16, 2000 4:36 AM
Subject: [fw-wiz] ICMP on a firewall


> Can anybody point me to some sources about ICMP Blocking?
> I am trying to figure out, which ICMP messages I should allow, which I
> should block, how to react, ...
>
> Many thanks in advance
> Jan Stifter