X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/blobdiff_plain/3b250fe6986bd168aa7e4f46336b3a43b2735b37..44f9582788168b13a9163138f5e55bba889712e7:/icmp.m4

diff --git a/icmp.m4 b/icmp.m4
index 460c838..93c2973 100644
--- a/icmp.m4
+++ b/icmp.m4
@@ -33,21 +33,6 @@ for type in echo-request echo-reply; do
   run ip6tables -A check-icmp -p icmpv6 --icmpv6-type $type -j RETURN
 done
 
-## Certainly don't allow ping to broadcast or multicast addresses.
-case $forward in
-  1)
-    run iptables -A FORWARD -g forbidden \
-	    -p icmp --icmp-type echo-request \
-	    -m addrtype --dst-type BROADCAST
-    run iptables -A FORWARD -g forbidden \
-	    -p icmp --icmp-type echo-request \
-	    -d 224.0.0.0/8
-    run ip6tables -A FORWARD -g forbidden \
-	    -p icmpv6 --icmpv6-type echo-request \
-	    -d ff00::/16
-    ;;
-esac
-
 m4_divert(58)m4_dnl
 ## Other ICMP is basically benign, we claim.
 run ip46tables -A check-icmp -j ACCEPT