Does keep-state work on ICMP protocol

[Jose Hidalgo Herrera]

On Sun, 2004-06-13 at 12:24, JJB wrote:

> Does keep-state option work on an ICMP protocol rule?
> 
> If not, shouldn't an syntax error be issued?
> 


Yes it works, 
I can see the dynamic rules:

sh# ipfw -d show | grep icmp

00092  447601   36833705 allow icmp from any to any keep-state icmptype
0,3,5,8,11

00092 57895 4862580 (T 4, slot 20) <-> icmp, xx.xx.xx.xx 0<->
xx.xx.xx.xx 0
00092 0 0 (T 4, slot 59) <-> icmp, xx.xx.xx.xx 0<-> xx.xx.xx.xx 0



> 
> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"

Jose Hidalgo
PGP: 15524480
jose at hostarica.com