Re: [suse-security] ICMP filter in SuSEfirewall? (again)

On Tue, 23 Jan 2001, Rick Green wrote:

Can someone point me to the RFC that defines all the ICMP sub-types?

Are these the definitions you mean? #define ICMP_ECHOREPLY 0 /* Echo Reply */ #define ICMP_DEST_UNREACH 3 /* Destination Unreachable */ #define ICMP_SOURCE_QUENCH 4 /* Source Quench */ #define ICMP_REDIRECT 5 /* Redirect (change route) */ #define ICMP_ECHO 8 /* Echo Request */ and so forth I took this from the kernel source tree in: /usr/data/src/linux-2.2.13.SuSE/include/net/icmp.h I just posted a similar question about these DENYs to the list, so sorry about the duplication. I am very interested to hear what the Destination Unreachable packets do for the ISP and for attackers. dproc