rendered paste bodyroot@overmind [16:41:40] :/home/elius# cat /usr/sbin/firewall | grep icmp
/bin/echo 1 > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
iptables -N icmp-in
iptables -N icmp-out
iptables -A INPUT -p icmp -j icmp-in
iptables -A OUTPUT -p icmp -j icmp-out
iptables -A FORWARD -p icmp -m state --state NEW -s 192.168.1.1/255.255.255.0 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 0 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 3 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 4 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 8 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 11 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 12 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 14 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 16 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 18 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-out -p icmp --icmp-type 0 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-out -p icmp --icmp-type 4 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-out -p icmp --icmp-type 8 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-out -p icmp --icmp-type 12 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-out -p icmp --icmp-type 13 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-out -p icmp --icmp-type 15 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-out -p icmp --icmp-type 17 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -i ppp+ -j DROP
iptables -A icmp-out -o ppp+ -j DROP