Dear U.SivaKumar , whether you command for ipchains means forward everything?

[frederick van targero]

#ipchains -A input -i eth1 -p udp -s 0/0 53 -d 0/0 1024:65535 -j ACCEPT

seems it forward everything.
i think, may be i can only forward the dns,
right yet i can ping the dns server as well as the server has been set well in client, so, i only need the port of dns?

am i right?

regards,
frederick

[U.SivaKumar_2]

Hi,
I think you have added only one ipchains in the
system. For blocking ping packets put these commands
# rule to block incoming ICMP echo requests

ipchains -A input -i eth0 -p icmp -s 0.0.0.0/0 -d 0.0.0.0/0 8 -l -j DENY

# rule to block outgoing ICMP echo replies

ipchains -A output -i eth0 -p icmp -s 0.0.0.0/0 0 -d 0.0.0.0/0 -l -j DENY

regards,
U.SivaKumar