X-Git-Url: http://lab.mitty.jp/git/?a=blobdiff_plain;ds=sidebyside;f=iptables%2Fufw%2Fraw.rules;fp=iptables%2Fufw%2Fraw.rules;h=f379716924ccdb48396b025fc23bde33565a1868;hb=c8daa6983248628690543c953d99bad4dd6cb64d;hp=8b4a30622cdda6c68db6ed0a9dbbca1c58e16b09;hpb=84d82932ad5d20fba956d85c903705ff2f2c6a7a;p=lab.git

diff --git a/iptables/ufw/raw.rules b/iptables/ufw/raw.rules
index 8b4a306..f379716 100644
--- a/iptables/ufw/raw.rules
+++ b/iptables/ufw/raw.rules
@@ -17,7 +17,7 @@
 -A LOG_ICMP -j LOG --log-prefix "[UFW BLOCK BAD-ICMP]: " --log-level err -m limit --limit 3/min --limit-burst 10
 -A LOG_ICMP -j DROP
 # Too large icmp requests
--A PREROUTING -p icmp --icmp-type echo-request -m length --length 85: -j LOG_ICMP
+-A PREROUTING -p icmp --icmp-type echo-request -m length --length 128: -j LOG_ICMP
 # Too many times of icmp requests (only 5 packets per second if over 10pkts/sec)
 -A PREROUTING -p icmp --icmp-type echo-request -m limit --limit 5/s --limit-burst 10 -j ACCEPT
 -A PREROUTING -p icmp --icmp-type echo-request -j LOG_ICMP