I wanted to drop all ICMP traffic, tried to create the rules in the gui, but no progress.
I did miss the direct rules, should work in the gui also.
So I did it with the cmd command:
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p icmp -j DROP firewall-cmd --permanent --direct --add-rule ipv6 filter INPUT 0 -p icmp -j DROP
Leave a Reply