Shorewall users - Mar 2003 - Accepting Pings.

I wonder if anyone on the list can help me here.

I am using version 1.3.14 with OLD_PING_HANDLING=NO.
I DON''T want to allow pings except I WILL ACCEPT pings from one
particular system.

I see in the docs that if I use the  icmpdef file with
''run_iptables -A icmpdef -p icmp --icmp-type 8 -j ACCEPT'',
that pings will be accepted from everyone. Is it this statement that I
would use to make pings more selective or do I simply add a new rule in
the rules file.

Something like :


ACCEPT ip_address icmp 8

I figure there is more to this than what I am saying but maybe not.

Anyone please.

---
Ted Gervais
Coldbrook Nova Scotia
Canada B4R1A7

Hi,

Ted Gervais said:
>
> I wonder if anyone on the list can help me here.
>
> I am using version 1.3.14 with OLD_PING_HANDLING=NO.
> I DON''T want to allow pings except I WILL ACCEPT pings from one
> particular system.
>
> I see in the docs that if I use the  icmpdef file with
> ''run_iptables -A icmpdef -p icmp --icmp-type 8 -j
ACCEPT'',
> that pings will be accepted from everyone. Is it this statement that I
> would use to make pings more selective or do I simply add a new rule in
> the rules file.
>
> Something like :
>
>
> ACCEPT ip_address icmp 8
>
> I figure there is more to this than what I am saying but maybe not.
Just add the particular rule. For example:

ACCEPT   loc   $FW   icmp

Greets
Dennis