{"action":"created","issue":{"url":"https://api.github.com/repos/t-woerner/firewalld/issues/77","repository_url":"https://api.github.com/repos/t-woerner/firewalld","labels_url":"https://api.github.com/repos/t-woerner/firewalld/issues/77/labels{/name}","comments_url":"https://api.github.com/repos/t-woerner/firewalld/issues/77/comments","events_url":"https://api.github.com/repos/t-woerner/firewalld/issues/77/events","html_url":"https://github.com/t-woerner/firewalld/issues/77","id":131365639,"number":77,"title":"Please add support for blocking one or more codes of an ICMP type","user":{"login":"hwoarang","id":45309,"avatar_url":"https://avatars.githubusercontent.com/u/45309?v=3","gravatar_id":"","url":"https://api.github.com/users/hwoarang","html_url":"https://github.com/hwoarang","followers_url":"https://api.github.com/users/hwoarang/followers","following_url":"https://api.github.com/users/hwoarang/following{/other_user}","gists_url":"https://api.github.com/users/hwoarang/gists{/gist_id}","starred_url":"https://api.github.com/users/hwoarang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hwoarang/subscriptions","organizations_url":"https://api.github.com/users/hwoarang/orgs","repos_url":"https://api.github.com/users/hwoarang/repos","events_url":"https://api.github.com/users/hwoarang/events{/privacy}","received_events_url":"https://api.github.com/users/hwoarang/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-04T14:33:14Z","updated_at":"2016-02-07T09:00:15Z","closed_at":"2016-02-07T09:00:15Z","body":"Right now firewalld either blocks or allows an ICMP packet based on its type. However, certain ICMP types (eg type 3) have multiple codes associated with them. iptables can match such packets using '--icmp-type 3/2' which matches icmp packets of type=3 and code=2. Please consider adding such functionality to firewalld."},"comment":{"url":"https://api.github.com/repos/t-woerner/firewalld/issues/comments/180979914","html_url":"https://github.com/t-woerner/firewalld/issues/77#issuecomment-180979914","issue_url":"https://api.github.com/repos/t-woerner/firewalld/issues/77","id":180979914,"user":{"login":"hwoarang","id":45309,"avatar_url":"https://avatars.githubusercontent.com/u/45309?v=3","gravatar_id":"","url":"https://api.github.com/users/hwoarang","html_url":"https://github.com/hwoarang","followers_url":"https://api.github.com/users/hwoarang/followers","following_url":"https://api.github.com/users/hwoarang/following{/other_user}","gists_url":"https://api.github.com/users/hwoarang/gists{/gist_id}","starred_url":"https://api.github.com/users/hwoarang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hwoarang/subscriptions","organizations_url":"https://api.github.com/users/hwoarang/orgs","repos_url":"https://api.github.com/users/hwoarang/repos","events_url":"https://api.github.com/users/hwoarang/events{/privacy}","received_events_url":"https://api.github.com/users/hwoarang/received_events","type":"User","site_admin":false},"created_at":"2016-02-07T09:00:15Z","updated_at":"2016-02-07T09:00:15Z","body":"Seems like I was wrong. It appears that if you create an xml file for the specific type/code (eg protocol-unreachable.xml) then firewalld will happily use that and generate a valid ICMP rule."}}