> Is it possible to specify icmp type AND subtypes ( in numerical format ) > in iptables rules ? I know I can easily specify type, but I'm unsure about > subtypes .. you mean: iptables -A INPUT -p icmp --icmp-type 8/0 -j ACCEPT it's all ok to do that. Regards, Maciej Soltysiak