All pastes #509453 Raw Edit

Anonymous

public text v1 · immutable
·published 2007-05-25 13:50 UTC
rendered paste body
root@overmind [16:41:40] :/home/elius# cat /usr/sbin/firewall | grep icmp
/bin/echo 1 > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
iptables -N icmp-in 
iptables -N icmp-out
iptables -A INPUT  -p icmp -j icmp-in 
iptables -A OUTPUT -p icmp -j icmp-out
iptables -A FORWARD -p icmp -m state --state NEW -s 192.168.1.1/255.255.255.0 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 0  -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 3  -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 4  -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 8  -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in -p icmp --icmp-type 11 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT 
iptables -A icmp-in -p icmp --icmp-type 12 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT 
iptables -A icmp-in -p icmp --icmp-type 14 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT 
iptables -A icmp-in -p icmp --icmp-type 16 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT 
iptables -A icmp-in -p icmp --icmp-type 18 -s 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT 
iptables -A icmp-out -p icmp --icmp-type 0  -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT 
iptables -A icmp-out -p icmp --icmp-type 4  -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-out -p icmp --icmp-type 8  -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-out -p icmp --icmp-type 12 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT 
iptables -A icmp-out -p icmp --icmp-type 13 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT 
iptables -A icmp-out -p icmp --icmp-type 15 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT 
iptables -A icmp-out -p icmp --icmp-type 17 -d 0/0 -m limit --limit 2/s --limit-burst 4 -j ACCEPT
iptables -A icmp-in  -i ppp+ -j DROP 
iptables -A icmp-out -o ppp+ -j DROP