Filtering ICMP error messages

Discussion in 'LnS English Forum' started by 340justme, Sep 20, 2005.

Thread Status:
Not open for further replies.
  1. 340justme

    340justme Guest

    ICMP Payload

    Will LnS impliment iltering ICMP error messages based on the ICMP payload?
     
  2. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    Hi,

    Do you mean Type+Code is not sufficient to determine if an ICMP packet has to be blocked or allowed ? and sometime the payload content may help ?
    Do you have a concrete example ?

    There is no plan so far to include this kind of feature directly in Look 'n' Stop.
    However it is possible to write a specific ICMP plugin that could do that.
    Also the RawRuleEdition plugin (already available) is able to create such a rule.

    Regards,

    Frederic
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.