On February 2, 2004 12:16 pm, David C. Hart wrote: > On Mon, 2004-02-02 at 12:11, an unknown sender wrote: > > On February 2, 2004 12:02 pm, David C. Hart wrote: > > > -A INPUT -p icmp -m icmp --icmp-type 0 -j REJECT --reject-with > > > icmp-net-prohibited > > > > > > It doesn't seem to work. > > > > Please see Maicej's reply to a similar thread ... > > you need kernel > 2.4.21 and iptables > 1.2.8 > > Kernel = 2.4.24 IPTables = 1.2.9 *urmp* Prowled the source -- linux default icmp headers don't seem to include "prohibited" -- appears to come from iptables and is network-prohibited (there doesn't seem to be a short match function there) is func 3 code 9 from what I can tell.... (but heck -- I could be wrong) Alistair. > --------- > Quality Management - A Commitment to Excellence