Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Please add support for blocking one or more codes of an ICMP type #77

Closed
hwoarang opened this issue Feb 4, 2016 · 1 comment
Closed

Please add support for blocking one or more codes of an ICMP type #77

hwoarang opened this issue Feb 4, 2016 · 1 comment

Comments

@hwoarang
Copy link
Contributor

hwoarang commented Feb 4, 2016

Right now firewalld either blocks or allows an ICMP packet based on its type. However, certain ICMP types (eg type 3) have multiple codes associated with them. iptables can match such packets using '--icmp-type 3/2' which matches icmp packets of type=3 and code=2. Please consider adding such functionality to firewalld.
@hwoarang
Copy link
Contributor Author

hwoarang commented Feb 7, 2016

Seems like I was wrong. It appears that if you create an xml file for the specific type/code (eg protocol-unreachable.xml) then firewalld will happily use that and generate a valid ICMP rule.

@hwoarang hwoarang closed this as completed Feb 7, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@hwoarang