Blocking ICMP packets of a particular length

[BarryStiefel]

Blocking ICMP packets of a particular length



As from FireWall-1 NG FP3 SmartDefense blocks by default ICMP packets exceeding 64 bytes in size.

In previous versions you had to define a service of type Other. Put the following in the match field:

icmp, ip_len > 100

If using NG, set the protocol number to 1 and only put:

ip_len > 100

in the match field.

This will match any ICMP packets greater than 100 bytes in length (including headers). Create a rule with this new service to drop the packet.

-- GuyR - 18 Jan 2004

FAQForm FAQs.Class: ServicesFAQs FAQs.OS: FAQs.Version: