1:INPUT,FORWARD,OUTPUT 2-p icmp -m icmp --icmp-type any;=;OK 3# XXX: output uses the number, better use the name? 4-p icmp -m icmp --icmp-type echo-reply;-p icmp -m icmp --icmp-type 0;OK 5-p icmp -m icmp --icmp-type destination-unreachable;-p icmp -m icmp --icmp-type 3;OK 6# it does not acccept name/name, should we accept this? 7# ERROR: cannot load: iptables -A INPUT -p icmp -m icmp --icmp-type destination-unreachable/network-unreachable 8# -p icmp -m icmp --icmp-type destination-unreachable/network-unreachable;=;OK 9-m icmp;;FAIL 10# we accept "iptables -I INPUT -p tcp -m tcp", why not this below? 11# ERROR: cannot load: iptables -A INPUT -p icmp -m icmp 12# -p icmp -m icmp;=;OK 13-p icmp -m icmp --icmp-type 255/255;=;OK 14-p icmp -m icmp --icmp-type 255/0:255;-p icmp -m icmp --icmp-type any;OK 15