Digi TransPort WR11 User Manual page 767

Configuring security
[action]
The [action] firewall script field defines the action to be performed. Allowed values:
block
n
pass
n
pass-ifup
n
dscp
n
vdscp
n
debug
n
These actions operate as follows:
block
Prevents a packet from being allowed through the firewall. When block is specified, an optional field
can be included that causes an ICMP packet to be returned to the interface from which that packet
was received. You can use blocking to confuse hackers by having different responses to different
packets or for fooling an attacker into thinking a service is not present on a network.
The syntax for specifying the return of an ICMP packet is:
" r et ur n- i cm p" [ i cm p- t ype [ i cm p- code] ]
where:
[icmp_type]
Is a decimal number representing the ICMP type, or one of the predefined text codes listed in the
following table:
ICMP type value
1
2
3
4
5
6
7
8
9
10
11
12
Digi TransPort® Routers User Guide
ICMP type
Unreach
Echo
Echorep
squench
redir
timex
paraprob
timest
timestrap
inforeq
inforep
maskreg
Firewall
767