Subject: Re: IPF Rules
To: Todd Gruhns Acct <tgruhn2@mail.com>
From: David S. <davids@idiom.com>
List: netbsd-users
Date: 01/04/2002 23:50:27
On Fri, Jan 04, 2002 at 08:47:03PM -0800, David S. wrote:
>
> For what you seem to be after, I'd use the rules
>
> pass in quick on ppp0 icmp from any to any icmp-type 3
> # destination unreachable
>
> block return-rst in quick on ppp0 proto tcp from any to any
> block return-icmp(host-unr) in quick on ppp0 proto udp from any to any
Oops, make that
block return-icmp-as-dest(host-unr) in quick on ppp0 proto udp from any to any
David S.