I think it would be better to drop icmp on the firewall, by doing some kind of reject message, your letting people know that a host exists there. Jason http://forum.networkfu.org -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Krishantha Dinesh Sent: Monday, 18 June 2007 4:46 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: change reply message of icmp request Hi guys I am petty new for linux firewall. Now I want to change the reply massage of REJECT icmp request. Eg;- if my firewall got ping request I need send massage as "Ping request not ALLOWED by this IP" or something like this. I am going to reject icmp like this Iptables -A INPUT -p icmp -j REJECT If any body know this please help me. Krisha