Comments (2)
same here...
netboot:~# iptables -S allow-safe-icmp
-N allow-safe-icmp
-A allow-safe-icmp -m comment --comment "Allows simple pings from the world"
-A allow-safe-icmp -p icmp -j ACCEPT
netboot:~# iptables --line-numbers -L allow-safe-icmp
Chain allow-safe-icmp (1 references)
num target prot opt source destination
1 all -- anywhere anywhere /* Allows
simple pings from the world */
2 ACCEPT icmp -- anywhere anywhere
netboot:~# apt-cache policy iptables capirca linux-image-amd64
iptables:
Installed: 1.4.2-6
Candidate: 1.4.2-6
Version table:
*** 1.4.2-6 0
500 http://example.com lenny/main Packages
100 /var/lib/dpkg/status
capirca:
Installed: 1.0.r98-1+kfx.1
Candidate: 1.0.r98-1+kfx.1
Version table:
*** 1.0.r98-1+kfx.1 0
1005 http://example.com lenny/main Packages
100 /var/lib/dpkg/status
netboot:~# uname -a
Linux netboot.example.com 2.6.32-trunk-amd64 #1 SMP Sun Jan 10 22:40:40 UTC
2010 x86_64 GNU/Linux
I guess I should write a patch ...
Original comment by [email protected]
on 12 Jun 2010 at 2:44
from capirca.
I've made a major change recently to standardize icmp-types across the various
generators. All the generators should now properly validate and generate
correct icmp types in their output.
For more details, see
http://code.google.com/p/capirca/wiki/PolicyFormat#ICMP_TYPES
Original comment by [email protected]
on 12 Jul 2011 at 7:05
- Changed state: Fixed
from capirca.
Related Issues (20)
- Release new PyPi version HOT 1
- Support for IOSXR IPv6 Object Group ACLs
- Cisco object-group ACLs don't properly render ICMP type and code
- Cisco remarks missing quotes HOT 2
- Indentation is wrong for the return statement HOT 1
- iptables does not generate any rules from protocol:: icmp icmpv6
- Installer doesn't put capirca command in ~/.local/bin HOT 1
- Juniper ethernet-switching for EX or QFX
- Capirca overwrites the tools namespace HOT 1
- Add support in ArubaOS-Switch and AOS-CX-Switch HOT 3
- Add support in HP Advanced ACL
- Add support in Cisco WLC ACL
- ACL with line numbering
- Add a generator for NSX-T HOT 3
- Allow dot in token names
- Implement atomic acl updates on cisco ios
- Add support for MikroTik RouterOS ACLs
- Build is broken on Python 3.8 due to types used in NSX-T plugin HOT 1
- NSX-T plugin generates invalid payload: netblocks including 0.0.0.0/anything, port ranges consisting of one port HOT 2
- Add support for OPNSense
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from capirca.