Allow outgoing ping

diff --git a/files/ferm.conf.hcoop b/files/ferm.conf.hcoop
index 56da7a3..24f2adf 100644 (file)
--- a/files/ferm.conf.hcoop
+++ b/files/ferm.conf.hcoop
@@ -40,6 +40,9 @@ table filter {
         #mod state state INVALID DROP;
         mod state state (ESTABLISHED RELATED) ACCEPT;
 
         #mod state state INVALID DROP;
         mod state state (ESTABLISHED RELATED) ACCEPT;
 

+       # Allow ping
+       proto icmp ACCEPT;
+

        proto tcp dport ssh ACCEPT;
 
         # connections to domtool dispatcher and slaves (for e.g. QFoo)
        proto tcp dport ssh ACCEPT;
 
         # connections to domtool dispatcher and slaves (for e.g. QFoo)