Configuring security Firewall
Digi TransPort® Routers User Guide
767
[action]
The [action] firewall script field defines the action to be performed. Allowed values:
n block
n pass
n pass-ifup
n dscp
n vdscp
n debug
These actions operate as follows:
block
Prevents a packet from being allowed through the firewall. When block is specified, an optional field
can be included that causes an ICMP packet to be returned to the interface from which that packet
was received. You can use blocking to confuse hackers by having different responses to different
packets or for fooling an attacker into thinking a service is not present on a network.
The syntax for specifying the return of an ICMP packet is:
“ r et ur n- i cmp” [ i cmp- t ype [ i cmp- code] ]
where:
[icmp_type]
Is a decimal number representing the ICMP type, or one of the predefined text codes listed in the
following table:
ICMP type value ICMP type
1 Unreach
2 Echo
3 Echorep
4 squench
5 redir
6 timex
7 paraprob
8 timest
9 timestrap
10 inforeq
11 inforep
12 maskreg
To Next Page
Loading...
