diff options
| author | Holger Levsen <holger@layer-acht.org> | 2014-12-10 14:43:04 +0100 |
|---|---|---|
| committer | Holger Levsen <holger@layer-acht.org> | 2014-12-10 14:43:04 +0100 |
| commit | 5bf9df442e046a897281227c629475651f0412e8 (patch) | |
| tree | a781657804cb88ce96aa197eaea3ee15e8c3ca5a | |
| parent | f54b08ffd450a8b436ab77ab585a130980663073 (diff) | |
| download | jenkins.debian.net-5bf9df442e046a897281227c629475651f0412e8.tar.xz | |
allow ICMP to the machine too
| -rw-r--r-- | etc/shorewall/rules | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/etc/shorewall/rules b/etc/shorewall/rules index 7e998cba..1b7c8ffe 100644 --- a/etc/shorewall/rules +++ b/etc/shorewall/rules @@ -19,11 +19,10 @@ SECTION NEW # Drop Ping from the "bad" net zone.. and prevent your log from being flooded.. - -Ping(DROP) net $FW +#Ping(DROP) net $FW # Permit all ICMP traffic FROM the firewall TO the net zone - +ACCEPT net $FW icmp ACCEPT $FW net icmp # incoming http and ssh are allowed |