From 5bf9df442e046a897281227c629475651f0412e8 Mon Sep 17 00:00:00 2001
From: Holger Levsen <holger@layer-acht.org>
Date: Wed, 10 Dec 2014 14:43:04 +0100
Subject: allow ICMP to the machine too

---
 etc/shorewall/rules | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

(limited to 'etc/shorewall')

diff --git a/etc/shorewall/rules b/etc/shorewall/rules
index 7e998cba..1b7c8ffe 100644
--- a/etc/shorewall/rules
+++ b/etc/shorewall/rules
@@ -19,11 +19,10 @@
 SECTION NEW
 
 # Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
-
-Ping(DROP)	net		$FW
+#Ping(DROP)	net		$FW
 
 # Permit all ICMP traffic FROM the firewall TO the net zone
-
+ACCEPT		net		$FW		icmp
 ACCEPT		$FW		net		icmp
 
 # incoming http and ssh are allowed
-- 
cgit v1.2.3-54-g00ecf