Subject: Re: Disabling 'pong' answer
To: None <netbsd-help@netbsd.org>
From: Jukka Salmi <j+nbsd@2006.salmi.ch>
List: netbsd-help
Date: 04/22/2006 19:41:01
Domingo A. Siliceo --> netbsd-help (2006-04-22 17:32:27 +0000):
> i'm trying to write a ipf rule to disable the 'pong' answer to a
> 'ping' request from *outside* my network, with no success.

You probably want to block ICMP echo requests entering on your external
interface ($ext):

	block in quick on $ext proto icmp from any to any icmp-type echo


HTH, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~