Hi folks,
I am not sure 'subtypes' could be ICMP codes, but in case it is indeed,
iptables 1.2.7a help shows:
# iptables -p icmp --help
[...]
ICMP v1.2.7a options:
--icmp-type [!] typename match icmp type
(or numeric type or type/code)
So, I guess you could say for instance
iptables -A INPUT -p icmp -m icmp --icmp-type 3/0 -j ACCEPT
if you would like to accept ICMP traffic of type 3 (Destination
Unreachable) and code 0 (Destination Net Unreachable).
HTH
Andre
On Sun, 26 Jan 2003 17:02:00 +1100
Santi <nagajuna@optushome.com.au> wrote:
> Hello Guys,
>
> Is it possible to specify icmp type AND subtypes ( in numerical
> format )
> in iptables rules ? I know I can easily specify type, but I'm unsure
> about subtypes ..
>
>
> Sincerily,
> Leonardo Rodrigues
> Soluções IP
>
>
> Reply: You are able to define icmp subtypes, although I don't think
> that it is possible to do it numerically.
> For help on the types and subtypes issue the command from console:
>
> $iptables -p icmp --help
>
> This should show you the different types and subtypes that will
> enable you to get finer grain control.
>
> Santos.
>
>
--
Andre Oliveira da Costa
