Mailinglist Archive: opensuse-security (670 mails)

[Praise <praisetazio@xxxxxxxxxxxxx>]

> > for some reasons I would like to reject with a icmp source-quench.
> > I have tried this:
> > iptables -t filter -A LIMIT -m limit --limit 1/sec -j REJECT
> > --reject-with \ icmp-source-quench
> >
> > The problem is that it does not know nothing about icmp-source-quench...
> > what is the right reject?
>
> try this:
>
> iptables -t filter -p icmp --icmp-type source-quench -j REJECT
>
> With -p icmp --icmp-type .... you can determine, which types you want to
> reject or allow.
>
Hi,

I knew this:-)
I did not want to limit icmp source quench, I want to send them in response 
of some packets. The reason is obvious: I am trying to limit bandwidth to 
some pc in the internal network.
AFAIK, the cbq script is not useful for me, because I want to limit bandwidth 
on user basis and on internal lan network basis. I am not sure if this 
turnaround with iptables could work very well, I am trying to check (even if 
I dont see why it should not work).

Thank you for your reply, though.

Praise