22 May
2001
22 May
'01
08:02
Hi Christian, i've got the same problem. The reason is, that the ICMP-packets got a "bad checksum"-Flag, when arriving the SUSEFW-ACCEPT-PINGIN, so there is no answer and the icmp-request goes to the DROP-ICMPIN. i wrote an email about that to marc. he wants me to remove the rules which includes $IPTABLES -A $i -j TOS with "-p icmp" . Ok, if you removed that kind of rules, PING works fine. But i'm not sure about the security without those special icmp-rules.... I'll wait for a comment of someone, who knows more details - maybe Marc ;-) Norbert