Filtering ICMP error messages

Will LnS impliment iltering ICMP error messages based on the ICMP payload?

[Frederic]

Hi,

Do you mean Type+Code is not sufficient to determine if an ICMP packet has to be blocked or allowed ? and sometime the payload content may help ?
Do you have a concrete example ?

There is no plan so far to include this kind of feature directly in Look 'n' Stop.
However it is possible to write a specific ICMP plugin that could do that.
Also the RawRuleEdition plugin (already available) is able to create such a rule.

Regards,

Frederic