Filtering ICMP error messages

Discussion in 'LnS English Forum' started by 340justme, Sep 20, 2005.

Thread Status:
Not open for further replies.
  1. 340justme

    340justme Guest

    ICMP Payload

    Will LnS impliment iltering ICMP error messages based on the ICMP payload?
     
  2. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    Hi,

    Do you mean Type+Code is not sufficient to determine if an ICMP packet has to be blocked or allowed ? and sometime the payload content may help ?
    Do you have a concrete example ?

    There is no plan so far to include this kind of feature directly in Look 'n' Stop.
    However it is possible to write a specific ICMP plugin that could do that.
    Also the RawRuleEdition plugin (already available) is able to create such a rule.

    Regards,

    Frederic
     
Thread Status:
Not open for further replies.