Trying to get ping to work through iptables.

[Martin McCormick]

Rashkae writes:
> You need to accept icmp protocol packets for things like ping and
> traceroute.
> 
> /sbin/iptables -A INPUT -p icmp -j ACCEPT
> 

	Thank you. That worked. I could have sworn I tried that
once but maybe I mistyped the command. Anyway, that works fine,
now.

> Also, note that it's common practice to make your default Input Policy
> Drop, rather than a rule in the chain.  Strictly speaking, I don't think
> it makes a difference in the end, but it does make it possible to append
> rules at the end of the chain later on.

	Hmm. Very good point, but doesn't dropping the packet
preclude it from going any further?

Martin McCormick