932
edits
Changes
m
Clarified ICMP rules
#Add a rule to your MYICMP chain that denies ICMP pings from 192.168.X.1 (your Fedora host).
#Add a rule to your MYICMP chain that denies ICMP pings originating with MAC address of Fedora host's virbr0.
#Add a rule to the end of your MYICMP INPUT chain that allows ICMP pings from anywhere.
#Change the default policy on the INPUT chain in the filter table to DROP.