Add additional note about ping floods

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2059 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2005-04-17 01:42:44 +00:00
parent 15b7ca161c
commit 8de478584e

View File

@ -339,6 +339,17 @@ AllowPing <emphasis>&lt;source zone&gt;</emphasis>&nbsp;&nbsp; <emphasis>&lt;des
between the zone containing the system you are pinging from and the between the zone containing the system you are pinging from and the
zone containing 10.1.1.2, the ping requests will be dropped.</para> zone containing 10.1.1.2, the ping requests will be dropped.</para>
</listitem> </listitem>
<listitem>
<para>Ping requests are subject to logging under your policies. So
ping floods can cause an equally big flood of log messages. To
eliminate these, as the last rule in your /etc/shorewall/rules file
add:</para>
<programlisting>#ACTION SOURCE DEST PROTO DEST
# PORT(S)
DropPing net all</programlisting>
</listitem>
</itemizedlist> </itemizedlist>
</section> </section>