Re: IP fragmentation problem in the 2.0 kernels ?

Olaf Titz (
Wed, 10 Sep 1997 11:14:52 +0200

> Is there a way (using kernel 2.0.x) to block types of icmp with the
> firewalling code? i.e. say I have a multiport linux router and want to
> block just icmp echo request and echo reply. Is there an easy way to do

Yes, ICMP types are accepted as "source port number".

ipfwadm -I -a deny -P icmp -S 0/0 0 8 -D 0/0