summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHolger Levsen <holger@layer-acht.org>2014-12-10 14:43:04 +0100
committerHolger Levsen <holger@layer-acht.org>2014-12-10 14:43:04 +0100
commit5bf9df442e046a897281227c629475651f0412e8 (patch)
treea781657804cb88ce96aa197eaea3ee15e8c3ca5a
parentf54b08ffd450a8b436ab77ab585a130980663073 (diff)
downloadjenkins.debian.net-5bf9df442e046a897281227c629475651f0412e8.tar.xz
allow ICMP to the machine too
-rw-r--r--etc/shorewall/rules5
1 files changed, 2 insertions, 3 deletions
diff --git a/etc/shorewall/rules b/etc/shorewall/rules
index 7e998cba..1b7c8ffe 100644
--- a/etc/shorewall/rules
+++ b/etc/shorewall/rules
@@ -19,11 +19,10 @@
SECTION NEW
# Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
-
-Ping(DROP) net $FW
+#Ping(DROP) net $FW
# Permit all ICMP traffic FROM the firewall TO the net zone
-
+ACCEPT net $FW icmp
ACCEPT $FW net icmp
# incoming http and ssh are allowed