* FIX: increase acceptable icmp packet size limit

[lab.git] / iptables / ufw / raw.rules

diff --git a/iptables/ufw/raw.rules b/iptables/ufw/raw.rules
index 8b4a306..f379716 100644 (file)
--- a/iptables/ufw/raw.rules
+++ b/iptables/ufw/raw.rules
@@ -17,7 +17,7 @@
 -A LOG_ICMP -j LOG --log-prefix "[UFW BLOCK BAD-ICMP]: " --log-level err -m limit --limit 3/min --limit-burst 10
 -A LOG_ICMP -j DROP
 # Too large icmp requests
--A PREROUTING -p icmp --icmp-type echo-request -m length --length 85: -j LOG_ICMP
+-A PREROUTING -p icmp --icmp-type echo-request -m length --length 128: -j LOG_ICMP
 # Too many times of icmp requests (only 5 packets per second if over 10pkts/sec)
 -A PREROUTING -p icmp --icmp-type echo-request -m limit --limit 5/s --limit-burst 10 -j ACCEPT
 -A PREROUTING -p icmp --icmp-type echo-request -j LOG_ICMP