Question about icmp

Leslie Jensen leslie at eskk.nu
Wed Aug 20 17:26:28 UTC 2008


When setting up PF I found the recommendation to use the following rule 
to allow ICMP to pass.

# macros
icmp_types="echoreq"

# filter rules
pass in inet proto icmp all icmp-type $icmp_types keep state

I do not understand why this is necessary!

Will someone Please explain to me why it's necessary if I must have it, 
or if I can delete that rule.

Thanks

/Leslie


More information about the freebsd-pf mailing list