Blockrule for ICMP??

LuxLuv · 10-11-2009, 11:40 AM

Hallo guys!

Does somebody have an great pf rule for disable my firewall to respond
to incomming imcp requests from internet. I have tried some, but it doesn´t work.

/Cy

LuxLuv · 10-11-2009, 11:41 AM

Forget to say, its a Openbsd of course =)

rocket357 · 10-12-2009, 12:01 AM

Quote:

Originally Posted by LuxLuv

Hallo guys!

Does somebody have an great pf rule for disable my firewall to respond
to incomming imcp requests from internet. I have tried some, but it doesn´t work.

/Cy

Something like this?

ext_if=bge0 # whatever your external interface is

block drop in quick on $ext_if proto { icmp, icmp6 }

Fin7PL · 10-12-2009, 08:29 AM

In options, to make your firewall not to respond anything

Code:

set block-policy drop

And you shouldn´t answer to anything if you have the "first" firewallrule to

Code:

block log all

So IF you haven´t ENABLED incoming ICMP it should block it. You don´t need to block it separately.

also i recommend reading to properly configure -> http://www.openbsd.org/faq/pf/