Working on my writeup, I do not understand how firewall-config implements ICMP blocks.
How would I use firewall-config to implement the same rule as the following command implements?
# firewall-cmd --permanent --add-icmp-block=echo-request
Thanks!
Mark
On 26.08.2013 23:14, Mark Sobell wrote:
Working on my writeup, I do not understand how firewall-config implements ICMP blocks.
How would I use firewall-config to implement the same rule as the following command implements?
# firewall-cmd --permanent --add-icmp-block=echo-request
Thanks!
Mark
http://goo.gl/Bkup0X 19-Host-FirewallD-Config-Default-Zone-ICMP.png ;)
poma
Change Current View to Permanent Configuration, ICMP Filter tab, tick echo-request.
-- Jiri
On 08/26/2013 11:14 PM, Mark Sobell wrote:
How would I use firewall-config to implement the same rule as the following command implements?
# firewall-cmd --permanent --add-icmp-block=echo-request
No, I have figured out it is
Permanent Configuration, Zones tab, ICMP Filter tab, highlight public, tick echo-request. That seems to work.
Now the thing I am wondering about is
Permanent Configuration, ICMP Types tab, Destination tab, highlight echo-request, tick IPv4 or IPv6.
I assume putting a tick next to IPv4 or IPv6 must limit which destination the firewall blocks.
Thanks for your help!
Mark
Mark
On Tue, Aug 27, 2013 at 2:54 AM, Jiri Popelka jpopelka@redhat.com wrote:
Change Current View to Permanent Configuration, ICMP Filter tab, tick echo-request.
-- Jiri
On 08/26/2013 11:14 PM, Mark Sobell wrote:
How would I use firewall-config to implement the same rule as the following command implements?
# firewall-cmd --permanent --add-icmp-block=echo-request
______________________________**_________________ firewalld-users mailing list firewalld-users@lists.**fedorahosted.orgfirewalld-users@lists.fedorahosted.org https://lists.fedorahosted.**org/mailman/listinfo/**firewalld-usershttps://lists.fedorahosted.org/mailman/listinfo/firewalld-users
On 08/27/2013 08:30 PM, Mark Sobell wrote:
Now the thing I am wondering about is
Permanent Configuration, ICMP Types tab, Destination tab, highlight echo-request, tick IPv4 or IPv6.
I assume putting a tick next to IPv4 or IPv6 must limit which destination the firewall blocks.
Correct, - tick IPv4 means firewall will block this ICMP Type for IPv4 (ICMPv4) - tick IPv6 means firewall will block this ICMP Type for IPv6 (ICMPv6) - having *both* ticket means block both ICMPv4 and ICMPv6 - having *none* ticket *also* means block both ICMPv4 and ICMPv6 <- this has been very confusing in my point of view. Hopefully this commit (see the comment there) makes the logic more understandable: https://git.fedorahosted.org/cgit/firewalld.git/commit/?id=4b1928ec707e74683...
I also changed the label from "If you specify destination addresses, the ICMP Type entry will be limited to the destination." to "Specify whether this ICMP Type is available for IPv4 and/or IPv6."
If you think of something better, let me know. Thanks
-- Jiri
firewalld-users@lists.fedorahosted.org
-
Jiri Popelka -
Mark Sobell -
poma