-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sunday, 2013-04-21 at 11:13 -0400, James Knott wrote:
Carlos E. R. wrote:
But why does the openSUSE firewall reject that information? I expect that some process in my system is interested in that information. Should I open my firewall for it, and then, how?
I don't know what the situation is with SuSEfirewall, but some people block all ICMP, thinking it will protect them attacks. But in the process they block legitimate ICMP messages which they should be allowing, if they're to use the Internet properly. For example, if you're on the wrong route to a host, a router may generate an ICMP redirect, advising of the proper route. But if all ICMP is blocked, then your computer will not see that and keep trying until it times out.
I had these settings: FW_ALLOW_PING_FW="yes" FW_ALLOW_PING_DMZ="no" FW_ALLOW_PING_EXT="no" FW_ALLOW_FW_SOURCEQUENCH="" I have added: FW_TRUSTED_NETS="192.168.1.1,icmp" And I'll see what happens... - -- Cheers, Carlos E. R. (from 12.1 x86_64 "Asparagus" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) iEYEARECAAYFAlF0BhgACgkQtTMYHG2NR9WObACffjW3jAKRbO2IlusH4OifFggU QnoAoIjhPMx+CmMY21qXS5PGqXqR3iCw =syPD -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org