ICMP Type 0 is an echo reply. Request (ping) is Type 8. -----Original Message----- From: David C. Hart [mailto:dch@xxxxxxxxxxx] Sent: Monday, February 02, 2004 9:03 AM To: Iptables Mailing List Subject: ICMP Rule Problem Should this not reject echo requests? -A INPUT -p icmp -m icmp --icmp-type 0 -j REJECT --reject-with icmp-net-prohibited It doesn't seem to work. --------- Quality Management - A Commitment to Excellence