From 0bfd399344c09bca4c8909f42cb9ce15efa3254f Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Tue, 21 Sep 2004 20:18:43 +0000
Subject: [PATCH] Enable all ICMP from the Firewall

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1635 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 LrpN/etc/shorewall/rules | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/LrpN/etc/shorewall/rules b/LrpN/etc/shorewall/rules
index 63e8ac411..4a09e1fe0 100755
--- a/LrpN/etc/shorewall/rules
+++ b/LrpN/etc/shorewall/rules
@@ -331,12 +331,15 @@ ACCEPT          fw              net             udp     53
 #       Accept SSH connections from the local network for administration
 #
 ACCEPT          loc             fw              tcp     22
-#       Allow Ping To And From Firewall
+#       Allow Ping To Firewall
 #
 ACCEPT          loc             fw              icmp    8
 ACCEPT          net             fw              icmp    8
-ACCEPT          fw              loc             icmp    8
-ACCEPT          fw              net             icmp    8
+#
+#	Allow all ICMP types (including ping) From Firewall
+#
+ACCEPT          fw              loc             icmp
+ACCEPT          fw              net             icmp
 #
 # Bering specific rules:
 # allow loc to fw udp/53 for local/caching DNS servers to work