Allow outgoing ping
authorClinton Ebadi <clinton@unknownlamer.org>
Fri, 4 Jan 2013 07:28:41 +0000 (02:28 -0500)
committerClinton Ebadi <clinton@unknownlamer.org>
Fri, 4 Jan 2013 07:28:41 +0000 (02:28 -0500)
files/ferm.conf.hcoop

index 56da7a3..24f2adf 100644 (file)
@@ -40,6 +40,9 @@ table filter {
         #mod state state INVALID DROP;
         mod state state (ESTABLISHED RELATED) ACCEPT;
 
+       # Allow ping
+       proto icmp ACCEPT;
+
        proto tcp dport ssh ACCEPT;
 
         # connections to domtool dispatcher and slaves (for e.g. QFoo)