Hinko Kocevar wrote:
Our customers want to be able to ping the mobile device behind the linux firewall
and IMHO it is not possible for ICMP packets to be forwarded since it is a protocol
by itself (not a TCP/UDP style service).
*clearing my throat*
TCP and UDP are protocols no services! many services use TCP/UDP protocol!
TCP and UDP are very different, UDP is a connectionless protocol, in
opposite to TCP.
So ICMP is more like UDP, than like TCP.
Is it possible to 'port forward' ICMP requests?
First try, then cry ;-p
If u have an unused ip addr. on your gw, you could use that one to nat
the icmp, so your gateway still is reachable with icmp.
greets
Mart
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html