Opened 15 years ago
Closed 15 years ago
#38 closed defect (fixed)
shaping rules for icmp traffic fail
| Reported by: | Victor Julien | Owned by: | Victor Julien |
|---|---|---|---|
| Priority: | blocker | Milestone: | 0.6 |
| Component: | vuurmuur | Version: | 0.5.74 alpha 2 |
| Keywords: | Cc: |
Description
from http://sourceforge.net/forum/message.php?msg_id=4687980 :
"-I SHAPEOUT -o eth1 -p icmp -m icmp -s 192.168.0.8/255.255.255.255 --scmp-type 8/0 -d 192.168.0.0/255.255.255.0 -m state --state RELATED,ESTABLISHED -j CLASSIFY --set-class 3:11 This resulted in an error when loading this ruleset. iptables doesnt recognize the "--scmp-type", which probably should be "icmp-type"."
The return traffic rule for icmp is not generated right.
Note:
See TracTickets
for help on using tickets.
Fixed/worked around/hacked by changeset:147
It now works for ping, but the rest of icmp is ignored. Vuurmuur should no longer create an invalid ruleset though.