4:14 p.m.
Working on my writeup, I do not understand how firewall-config implements
ICMP blocks.
How would I use firewall-config to implement the same rule as the following
command implements?
# firewall-cmd --permanent --add-icmp-block=echo-request
Thanks!
Mark
9:54 p.m.
On 26.08.2013 23:14, Mark Sobell wrote:
Working on my writeup, I do not understand how firewall-config
implements
ICMP blocks.
How would I use firewall-config to implement the same rule as the following
command implements?
# firewall-cmd --permanent --add-icmp-block=echo-request
Thanks!
Mark
http://goo.gl/Bkup0X
19-Host-FirewallD-Config-Default-Zone-ICMP.png ;)
poma
4:54 a.m.
Change Current View to Permanent Configuration,
ICMP Filter tab, tick echo-request.
--
Jiri
On 08/26/2013 11:14 PM, Mark Sobell wrote:
How would I use firewall-config to implement the same rule as the
following command implements?
# firewall-cmd --permanent --add-icmp-block=echo-request
1:30 p.m.
No, I have figured out it is
Permanent Configuration, Zones tab, ICMP Filter tab, highlight public, tick
echo-request.
That seems to work.
Now the thing I am wondering about is
Permanent Configuration, ICMP Types tab, Destination tab, highlight
echo-request, tick IPv4 or IPv6.
I assume putting a tick next to IPv4 or IPv6 must limit which destination
the firewall blocks.
Thanks for your help!
Mark
Mark
On Tue, Aug 27, 2013 at 2:54 AM, Jiri Popelka <jpopelka(a)redhat.com> wrote:
Change Current View to Permanent Configuration,
ICMP Filter tab, tick echo-request.
--
Jiri
On 08/26/2013 11:14 PM, Mark Sobell wrote:
> How would I use firewall-config to implement the same rule as the
> following command implements?
>
> # firewall-cmd --permanent --add-icmp-block=echo-request
>
______________________________**_________________
firewalld-users mailing list
firewalld-users@lists.**fedorahosted.org<firewalld-users(a)lists.fedorahosted.org>
https://lists.fedorahosted.**org/mailman/listinfo/**firewalld-users<ht...
9:52 a.m.
On 08/27/2013 08:30 PM, Mark Sobell wrote:
Now the thing I am wondering about is
Permanent Configuration, ICMP Types tab, Destination tab, highlight
echo-request, tick IPv4 or IPv6.
I assume putting a tick next to IPv4 or IPv6 must limit which
destination the firewall blocks.
Correct,
- tick IPv4 means firewall will block this ICMP Type for IPv4 (ICMPv4)
- tick IPv6 means firewall will block this ICMP Type for IPv6 (ICMPv6)
- having *both* ticket means block both ICMPv4 and ICMPv6
- having *none* ticket *also* means block both ICMPv4 and ICMPv6 <-
this has been very confusing in my point of view. Hopefully this commit
(see the comment there) makes the logic more understandable:
https://git.fedorahosted.org/cgit/firewalld.git/commit/?id=4b1928ec707e74...
I also changed the label from
"If you specify destination addresses, the ICMP Type entry will be
limited to the destination."
to
"Specify whether this ICMP Type is available for IPv4 and/or IPv6."
If you think of something better, let me know.
Thanks
--
Jiri
3891
days inactive
3895
days old
firewalld-users@lists.fedorahosted.org
4 comments
3 participants
participants (3)
-
Jiri Popelka -
Mark Sobell -
poma