Hello guys, it is possible to permit icmp but dropping 10 percentage of the packets ?
As kiaunel said, I don't know of a way to drop a certain percentage of packets. However you can rate limit certain packets to some number. For example 5 packets per second.
add action=accept chain=ICMP comment=\
"Accept ICMP type 0:0 (Echo reply) and limit to 5 packets / sec" \
icmp-options=0:0-255 limit=5,5 protocol=icmp
Note that I have a specific ICMP chain that handles almost all events relating to ICMP packets. Hence the reason that the above code is in the ICMP chain and not the Input chain.
add action=jump chain=input comment=\
"Jump to ICMP chain to prevent being ping flooded." in-interface=\
E1-p2_Cable_Internet jump-target=ICMP protocol=icmp
What are you trying to accomplish?