Why this ICMP call is blocked?
Kari Lempiainen <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <CAD3GaphUBgBeAdi7cXJKkroDPczDNt3gS9vWZxUzsvENhvY0zw@mail.gmail.com> |
Hi, I feel stupid. I have a short program which sends a "Wake On Lan" packet to a computer in my local network. Protocol is ICMP. The sending computer is 192.168.2.8 and target is 192.168.2.5. When I run my program I get “sendto: Operation not permitted” and the syslog tells me this: 'firehol: 'OUT-myif1':'IN= OUT=eth0 SRC=192.168.2.8 DST=192.168.2.5 LEN=122 TOS=0x00 PREC=0x00 TTL=64 ID=52172 DF PROTO=ICMP TYPE=255 CODE=255 In my firehol.conf file I have: interface eth0 myif1 src "192.168.2.0/24" dst 192.168.2.8 policy drop [lines removed] client all accept Why the packet is dropped? Doesn’t "client all accept” mean that 192.168.2.8 can send anything? Kari _______________________________________________ Firehol-support mailing list [email protected] http://lists.firehol.org/mailman/listinfo/firehol-support