932
edits
Changes
m
→Creating Customized Chains: - minor rephrazing for clarity
# Add a rule to the beginning of the '''INPUT''' chain to send '''ICMP''' packets to your '''MYICMP''' chain.
# Find a partner and get the ipaddress and MAC address of their external facing interface. If you don't have a partner - use a virtual machine.
# Add a rule to your '''MYICMP''' chain that allows '''ICMP''' packets coming in on your virtual interface from '''192.168.X.0/24''' (i.e. your internal network).
# Add a rule to your '''MYICMP''' chain that denies '''ICMP pings''' originating with MAC address of your partner's machine.
# Add a rule to your '''MYICMP''' chain that denies '''ICMP pings''' originating with IP address of your partner's machine.