Re: Rules for ICMP Type X Code Y

bgardner@iprotech.info
Thu, 05 Nov 2009 19:03:10 -0000

teastep@shorewall.net wrote:
>
> bgardner@iprotech.info wrote:
> > Is it possible to create rules that apply to specific codes of ICMP
> types?
> >
> > The AllowICMPs macro seems to have this type of precision for ICMP
> type 3 code 4.
> >
> > How can I write a rule that has this kind of precision for arbitrary
> ICMP types/codes?
>
> The same way as the macro does.
>

The macro appears to use keywords: ''fragmentation-needed'' and
''time-exceeded''

Where can I find where these are defined?  Or, is there a list acceptable
keywords?

I grepped /etc/shorewall and /usr/share/shorewall but nothing came up.