GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Apply firewall rules on ICMP · Issue #3 · celzero/firestack

Apply firewall rules on ICMP #3

New issue
Copy link
New issue
Copy link
Closed
Closed
Apply firewall rules on ICMP#3
Copy link
Assignees
ignoramous

Description

@ignoramous
ignoramous
opened on Jul 20, 2021
Issue body actions

ICMP messages may be used to exfiltrate data: https://archive.is/OaV7K but the underlying LwIP stack doesn't expose handler to any other protocol-type other than UDP or TCP, which means the firewall rules don't get to process ICMP messages.

So: Either add ICMP handlers to LwIP and access it through go-tun2socks or attempt a switch to gVisor NetStack.

Activity

  1. ignoramous
    self-assigned this
    on Jul 20, 2021

  2. ignoramous commented on May 7, 2022

    @ignoramous
    ignoramous
    on May 7, 2022
    ContributorAuthor
    More actions

    netstack take 2: https://github.com/celzero/firestack/tree/n2/

  3. ignoramous commented on Jun 10, 2022

    @ignoramous
    ignoramous
    on Jun 10, 2022
    ContributorAuthor
    More actions

    Instead of the forked fdbased impl, we could use upstream's; see: google/gvisor#7125 and xjasonlyu/tun2socks#82

  4. ignoramous commented on Feb 28, 2023

    @ignoramous
    ignoramous
    on Feb 28, 2023
    ContributorAuthor
    More actions

    34be365

  5. ignoramous
    closed this as completedon Feb 28, 2023

  6. ignoramous commented on Apr 17, 2026

    @ignoramous
    ignoramous
    on Apr 17, 2026
    ContributorAuthor
    More actions
    • ICMP limitation containers/gvisor-tap-vsock#428
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

  • @ignoramous
    ignoramous

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
    You are visitor 01402503 — GeezerVison does not store the pages you look up.
    Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.