Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to reject packets with iptables with ICMP type 3 code 13, communication administratively prohibited.

Does anyone know a method of doing this? There doesn't seem to be an argument to --reject-with that generates these packets.

Thanks

share|improve this question

1 Answer 1

up vote 1 down vote accepted

--reject-with icmp-admin-prohibited

Using icmp-admin-prohibited with kernels that do not support it will result in a plain DROP instead of REJECT

share|improve this answer
    
Unfortunately that triggers a separate type and code, ICMP type 3, code 10. Further research seems to indicate that iptables doesn't support this behavior. –  Steve Oct 28 '09 at 15:56
    
Nevermind...this is the correct answer, thanks Teddy! –  Steve Oct 28 '09 at 19:03
    
@Steve: You can delete comments, you know... –  Teddy Oct 29 '09 at 0:41

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.