13.3. ICMP Settings

ICMP Sends Per Sec Limit

Specifies the maximum number of ICMP messages cOS Core may generate per second. This includes ping replies, destination unreachable messages and also TCP RST packets. In other words, this setting limits how many Rejects per second may be generated by the Reject rules in the Rules section.

Default: 500

Silently Drop State ICMPErrors

Specifies if cOS Core should silently drop ICMP errors pertaining to statefully tracked open connections. If these errors are not dropped by this setting, they are passed to the rule set for evaluation just like any other packet.

Default: Enabled