Drop other ICMP packets?

[CristianCantoro]

I am not an expert, but shouldn't we add the following rule:

-A INPUT -p icmp -j DROP

at line 34 in iptables.test.rules to block all other ICMP packets.

[moba]

Hmm. You're right that in the current form, explicitly listing some ICMP packet types does not really make sense. In doubt I would rather remove the ICMP filtering altogether and simply allow all ICMP. One could also think about rate limiting and specifically filtering out certain types of requests. As it stands, the configuration allows any ICMP requests.