X-Git-Url: http://lab.mitty.jp/git/?a=blobdiff_plain;f=iptables%2Fufw%2Fraw.rules;h=f379716924ccdb48396b025fc23bde33565a1868;hb=7c270d4dd09b93118b652bfd994edfeda5a6b2a0;hp=8b4a30622cdda6c68db6ed0a9dbbca1c58e16b09;hpb=49996391c0a72e72d2f07c9959e94f6036d621bb;p=lab.git

diff --git a/iptables/ufw/raw.rules b/iptables/ufw/raw.rules
index 8b4a306..f379716 100644
--- a/iptables/ufw/raw.rules
+++ b/iptables/ufw/raw.rules
@@ -17,7 +17,7 @@
 -A LOG_ICMP -j LOG --log-prefix "[UFW BLOCK BAD-ICMP]: " --log-level err -m limit --limit 3/min --limit-burst 10
 -A LOG_ICMP -j DROP
 # Too large icmp requests
--A PREROUTING -p icmp --icmp-type echo-request -m length --length 85: -j LOG_ICMP
+-A PREROUTING -p icmp --icmp-type echo-request -m length --length 128: -j LOG_ICMP
 # Too many times of icmp requests (only 5 packets per second if over 10pkts/sec)
 -A PREROUTING -p icmp --icmp-type echo-request -m limit --limit 5/s --limit-burst 10 -j ACCEPT
 -A PREROUTING -p icmp --icmp-type echo-request -j LOG_ICMP