View Issue Details

IDProjectCategoryView StatusLast Update
0008330CentOS-7firewalldpublic2015-03-23 18:36
ReporterxPkBlDt81cd0 
PrioritynormalSeverityfeatureReproducibilityN/A
Status newResolutionopen 
Platformx86_64OSCentOSOS Version7.0
Product Version7.0-1406 
Target VersionFixed in Version 
Summary0008330: Missing icmptypes
Descriptionfirewalld does not have icmptypes named timestamp and timestamp-reply.

It seems logical that one should be able to use use firewall-cmd's --add-icmp-block flag to block these types of ICMP requests as can be done with other types of ICMP requests. For example, this seems like it should be valid:

# firewall-cmd --add-icmp-block=timestamp

But there is no such icmptype in firewalld.

The intended outcome can be achieved using iptables directly:

# iptables -A INPUT -p icmp -m icmp --icmp-type timestamp-request -j DROP

But shouldn't firewalld be able to do the same thing through its existing ICMP block feature?
TagsNo tags attached.
abrt_hash
URL

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2015-03-23 18:36 xPkBlDt81cd0 New Issue