How to configure firewalld to send out icmp type 3 code 3 (port-unreachble) message instead of type 3 code 3 (icmp-host-prohibited) default messages in RHEL7?
Issue
- We have a system running RHEL 7 with
firewalldenabled. - In the public interface we have permited these following services:
public (default, active)
interfaces: eno16780032
sources:
services: ftp http https
ports:
masquerade: no
forward-ports:
icmp-blocks: parameter-problem redirect router-advertisement router-solicitation source-quench
rich rules:
- When a traceroute is performed to that interface IP from the network we are seeing ICMP type 3 code 10 (Destination unreachable).
- How can we change the response type to icmp type 3 code 3 (port-unreachable) instead of destination unreachable message?
- How to configure firewalld to change the icmp responses?
Environment
- Red Hat Enterprise Linux (RHEL)7.0
- Firewalld service.
- Firewalld rich rules.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.