Endian Bugtracker
Endian Issue Tracker





Please see now our new Bugtracker system: JIRA








View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0002113Endian FirewallFirewall (iptables)public2009-08-29 15:312010-03-08 17:15
Reporterlightenup 
Assigned Topeter-endian 
PrioritynormalSeverityfeatureReproducibilityalways
StatusconfirmedResolutionopen 
PlatformOSOS Version
Product Version2.2 
Target VersionfutureFixed in Version 
Summary0002113: Outgoing icmp traffic is limited by iptables.
DescriptionToday I added a rule to allow for my servers to perform traceroute to the internet. I am unable to perform a standard trace due to the fact that the limit is set to 'avg 3/sec burst'. So in order to complete the trace I need to do it slowly 'traceroute -z 700 -I 4.2.2.2'. Perhaps all rules should include a feature to limit them and make it possible to adjust the limiting rate. The BOT addon for IpCop had a similar feature.


Chain OUTGOINGFW (1 references)
pkts bytes target prot opt in out source destination

22 1275 NFLOG icmp -- br0 eth2 0.0.0.0/0 0.0.0.0/0 limit: avg 3/sec burst 5 mode srcip-dstip icmp type 8 nflog-prefix "OUTGOINGFW:ACCEPT:1"

12 714 ALLOW icmp -- br0 eth2 0.0.0.0/0 0.0.0.0/0 limit: avg 3/sec burst 5 mode srcip-dstip icmp type 8
TagsNo tags attached.
Attached Files

- Relationships
duplicate of 0000926assignedpeter-endian firewalls: add possibility to hashlimit services 

-  Notes
There are no notes attached to this issue.

- Issue History
Date Modified Username Field Change
2009-08-29 15:31 lightenup New Issue
2009-08-29 15:31 lightenup Assigned To => peter-endian
2010-03-08 17:14 peter-endian Status new => confirmed
2010-03-08 17:14 peter-endian Severity block => feature
2010-03-08 17:14 peter-endian Target Version => future
2010-03-08 17:15 peter-endian Relationship added duplicate of 0000926

Copyright © 2005-2008 Endian, SRL. All rights reserved.


Copyright © 2000 - 2012 MantisBT Group
Powered by Mantis Bugtracker