Add additional note about ping floods

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2059 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2005-04-17 01:42:44 +00:00
parent 15b7ca161c
commit 8de478584e

View File

@ -339,6 +339,17 @@ AllowPing <emphasis>&lt;source zone&gt;</emphasis>&nbsp;&nbsp; <emphasis>&lt;des
between the zone containing the system you are pinging from and the
zone containing 10.1.1.2, the ping requests will be dropped.</para>
</listitem>
<listitem>
<para>Ping requests are subject to logging under your policies. So
ping floods can cause an equally big flood of log messages. To
eliminate these, as the last rule in your /etc/shorewall/rules file
add:</para>
<programlisting>#ACTION SOURCE DEST PROTO DEST
# PORT(S)
DropPing net all</programlisting>
</listitem>
</itemizedlist>
</section>