Mailinglist Archive: opensuse-security (670 mails)

[Ralf Ronneburger <ralf@xxxxxxxxxxxxxx>]

Hello,

Praise wrote:

> Hi all,
>
> for some reasons I would like to reject with a icmp source-quench.
> I have tried this:
> iptables -t filter -A LIMIT -m limit --limit 1/sec -j REJECT --reject-with \
> icmp-source-quench
>
> The problem is that it does not know nothing about icmp-source-quench...
> what is the right reject?


try this:

iptables -t filter -p icmp --icmp-type source-quench -j REJECT

With -p icmp --icmp-type .... you can determine, which types you want to 
reject or allow.

Bye, Ralf


> Praise