On October 15, 2003 03:18 am, Michael Kearey wrote: > Alistair Tonner wrote: > <Snip> > > >>/sbin/iptables -A ICMP -p icmp --icmp-type source-quench -j ACCEPT > >>/sbin/iptables -A ICMP -p icmp --icmp-type time-exceeded -j ACCEPT > >>#/sbin/iptables -A ICMP -p icmp --icmp-type echo-request -j ACCEPT > > ^ > > >>/sbin/iptables -A ICMP -p icmp --icmp-type echo-request -m limit --limit > >>5/second -j ACCEPT > > > > The limit rule above will never be used as the packets are allready > > accepted by the rule above it. > > <Snip> > > It's commented out isn't it? Okay ... perhaps I should go back to sleep now... *grin* > > Cheers, > Michael -- Alistair Tonner nerdnet.ca Senior Systems Analyst - RSS Any sufficiently advanced technology will have the appearance of magic. Lets get magical!