13,420
edits
Changes
no edit summary
# Remove the rule in your '''INPUT''' chain that is allowing all '''icmp'''.
# Make a new chain named '''MYICMP'''.
# Add a rule to the '''beginning of the '''INPUTchain''' chain to send '''ICMP''' packets to your '''MYICMP''' chain.# Find a partner and get the ipaddress '''IP ADDRESS''' and '''MAC address ''' of '''their ''' '''external facing interface''' (should be an internal address beginning with '''10.x.x.x''') .
# Add a rule to your '''MYICMP''' chain that allows '''ICMP''' packets coming in from '''192.168.X.0/24''' (i.e. your internal network).
# Add a rule to the beginning of your '''MYICMP''' chain that denies '''ICMP pings''' originating with MAC address of your partner's machine.
