On Sun, Jun 02, 2024 at 11:21:16AM +0200, Marco Moock wrote:
Hello!
I have: rule family="ipv4" source address="185.122.204.97" reject
This results in
chain filter_IN_public_deny { ip saddr 185.122.204.97 reject with icmp port-unreachable }
Is there a way to use firewalld rich-rules to use administratively prohibited instead?
Yes. You need to add the "type" argument to reject. See man page firewalld.richlanguage(5).
Try this:
rule family="ipv4" source address="185.122.204.97" reject type=communication-prohibited
This will use ICMP type 3 code 13.