Posted: Mon Mar 11, 2019 7:04 pm
Hello guys, it is possible to permit icmp but dropping 10 percentage of the packets ?
As kiaunel said, I don't know of a way to drop a certain percentage of packets. However you can rate limit certain packets to some number. For example 5 packets per second.Hello guys, it is possible to permit icmp but dropping 10 percentage of the packets ?
add action=accept chain=ICMP comment=\ "Accept ICMP type 0:0 (Echo reply) and limit to 5 packets / sec" \ icmp-options=0:0-255 limit=5,5 protocol=icmp
add action=jump chain=input comment=\ "Jump to ICMP chain to prevent being ping flooded." in-interface=\ E1-p2_Cable_Internet jump-target=ICMP protocol=icmp
Just learned something new. Did not even know that existed, but sure enough - it's there...You could use the "nth" filter option to drop every nth packet. so for 10% every 10 packet should be dropped.