On Thu, May 09, 2002 at 08:17:29PM +0000, gregory gilbert wrote: > I use the DOS ping command. The -l option allow to specify > the length ot the icmppackets.
Ooooh, a DOS ping ;-) > > > "iptables -A FORWARD ! -f -p icmp -j DROP" should only drop > the first fragment or the unfragmented packets Apparently "! -f" means the first fragment which includes the unfragmented packets as well :-) Ramin > > Greg
