ICMP destination unreachable - communication filtered

Hi All,
I need your help. I want to configure a gateway to generate ICMP
destination unreachable - communication filtered (code 13) for filtered
packets by it. Can it be done using iptables/ipchains? Can you please
tell me how to achieve this? In iptables, you can jump to REJECT and
use --reject-with option. But --reject-with option doesnt have this
code (13).
Any suggestions?
Thanks,
Sweta

Hello,

sweta a écrit :
> I need your help. I want to configure a gateway to generate ICMP
> destination unreachable - communication filtered (code 13) for filtered
> packets by it. Can it be done using iptables/ipchains?

Yes.

> Can you please
> tell me how to achieve this? In iptables, you can jump to REJECT and
> use --reject-with option. But --reject-with option doesnt have this
> code (13).

You need iptables >= 1.2.9 and a Linux kernel >= 2.4.22.

Pascal Hambourg wrote:
> Hello,
>
> sweta a écrit :
>> I need your help. I want to configure a gateway to generate ICMP
>> destination unreachable - communication filtered (code 13) for filtered
>> packets by it. Can it be done using iptables/ipchains?
>
> Yes.
>
>> Can you please
>> tell me how to achieve this? In iptables, you can jump to REJECT and
>> use --reject-with option. But --reject-with option doesnt have this
>> code (13).
>
> You need iptables >= 1.2.9 and a Linux kernel >= 2.4.22.

-REJECT --reject-with icmp-admin-prohibited

generates icmp type 3, code 13 (RFC 1812) if your kernel supports it.