Mart Frauenlob wrote: > Hinko Kocevar wrote: >> Our customers want to be able to ping the mobile device behind the >> linux firewall >> and IMHO it is not possible for ICMP packets to be forwarded since it >> is a protocol >> by itself (not a TCP/UDP style service). >> >> > > *clearing my throat* > TCP and UDP are protocols no services! many services use TCP/UDP protocol! > TCP and UDP are very different, UDP is a connectionless protocol, in > opposite to TCP. > > So ICMP is more like UDP, than like TCP. Right. >> Is it possible to 'port forward' ICMP requests? >> > > First try, then cry ;-p > > If u have an unused ip addr. on your gw, you could use that one to nat > the icmp, so your gateway still is reachable with icmp. > Hmm that seems like a viable solution - totally forgot about the network interface aliasing 8). Thanks! -- Hinko Kočevar, OSS developer ČETRTA POT, d.o.o. Planina 3, 4000 Kranj, SI EU tel ++386 (0) 4 280 66 03 e-mail hinko.kocevar@xxxxxxxxxxxx http www.cetrtapot.si -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
