Re: [suse-security] Question on iptables

Hello, Praise wrote:

Hi all,

for some reasons I would like to reject with a icmp source-quench. I have tried this: iptables -t filter -A LIMIT -m limit --limit 1/sec -j REJECT --reject-with \ icmp-source-quench

The problem is that it does not know nothing about icmp-source-quench... what is the right reject?

try this: iptables -t filter -p icmp --icmp-type source-quench -j REJECT With -p icmp --icmp-type .... you can determine, which types you want to reject or allow. Bye, Ralf

Praise