View Issue Details

IDProjectCategoryView StatusLast Update
0008330CentOS-7firewalldpublic2015-03-23 18:36
Status newResolutionopen 
Platformx86_64OSCentOSOS Version7.0
Product Version7.0-1406 
Target VersionFixed in Version 
Summary0008330: Missing icmptypes
Descriptionfirewalld does not have icmptypes named timestamp and timestamp-reply.

It seems logical that one should be able to use use firewall-cmd's --add-icmp-block flag to block these types of ICMP requests as can be done with other types of ICMP requests. For example, this seems like it should be valid:

# firewall-cmd --add-icmp-block=timestamp

But there is no such icmptype in firewalld.

The intended outcome can be achieved using iptables directly:

# iptables -A INPUT -p icmp -m icmp --icmp-type timestamp-request -j DROP

But shouldn't firewalld be able to do the same thing through its existing ICMP block feature?
TagsNo tags attached.


There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2015-03-23 18:36 xPkBlDt81cd0 New Issue