On Sat, Feb 02, 2002 at 12:07:29PM -0800, R.P. Aditya wrote:
> On Sat, Feb 02, 2002 at 08:32:49PM +0100, Rogier R. Mulhuijzen wrote:
> > ICMP is an IP protocol, if the very first rule in IPFW is 'allow ip from
> > any to any' then ICMP is allowed.
>
> uh, that might be ipfw-speak (I don't use or pretend to know ipfw) but ICMP is
> NOT "part" of IP (that would defeat the whole purpose of using it as a control
> protocol for IP).
It sure is an IP protocol.
> Look at /etc/protocols:
>
> ip 0 IP # internet protocol, pseudo protocol number
> icmp 1 ICMP # internet control message protocol
And what does it say at the top of /etc/protocols?
# Internet protocols
All of the protocols on that list are different protocols you can run
over the Internet Protocol (IP).
Not only that, but ICMP _is_ also part of IP in the sense that any
compliant IP implementation must understand ICMP.
--
Crist J. Clark | [EMAIL PROTECTED]
| [EMAIL PROTECTED]
http://people.freebsd.org/~cjc/ | [EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message