1*a71a9546SAutomerger Merge Worker:INPUT,FORWARD,OUTPUT 2*a71a9546SAutomerger Merge Worker-p icmp -m icmp --icmp-type any;=;OK 3*a71a9546SAutomerger Merge Worker# XXX: output uses the number, better use the name? 4*a71a9546SAutomerger Merge Worker-p icmp -m icmp --icmp-type echo-reply;-p icmp -m icmp --icmp-type 0;OK 5*a71a9546SAutomerger Merge Worker-p icmp -m icmp --icmp-type destination-unreachable;-p icmp -m icmp --icmp-type 3;OK 6*a71a9546SAutomerger Merge Worker# it does not acccept name/name, should we accept this? 7*a71a9546SAutomerger Merge Worker# ERROR: cannot load: iptables -A INPUT -p icmp -m icmp --icmp-type destination-unreachable/network-unreachable 8*a71a9546SAutomerger Merge Worker# -p icmp -m icmp --icmp-type destination-unreachable/network-unreachable;=;OK 9*a71a9546SAutomerger Merge Worker-m icmp;;FAIL 10*a71a9546SAutomerger Merge Worker# we accept "iptables -I INPUT -p tcp -m tcp", why not this below? 11*a71a9546SAutomerger Merge Worker# ERROR: cannot load: iptables -A INPUT -p icmp -m icmp 12*a71a9546SAutomerger Merge Worker# -p icmp -m icmp;=;OK 13*a71a9546SAutomerger Merge Worker-p icmp -m icmp --icmp-type 255/255;=;OK 14*a71a9546SAutomerger Merge Worker-p icmp -m icmp --icmp-type 255/0:255;-p icmp -m icmp --icmp-type any;OK 15