enough-leather-70274
03/09/2021, 11:24 PMlittle-cartoon-10569
03/09/2021, 11:30 PMprotocol: "icmp", cidrBlocks: prefixList
. Afaik you shouldn't need fromPort and toPort for "all" ICMP traffic, only certain ICMP traffic cares about those.enough-leather-70274
03/09/2021, 11:30 PMfrom_port
and ICMP code in the to_port
, both of which are required... but that doesn't make sense as ICMP codes are error type indicators.little-cartoon-10569
03/09/2021, 11:31 PMenough-leather-70274
03/09/2021, 11:31 PMlittle-cartoon-10569
03/09/2021, 11:32 PMenough-leather-70274
03/09/2021, 11:36 PMType Protocol Port range
Custom ICMP - IPv4 Echo Reply 254
Type Protocol Port range
All ICMP - IPv4 ICMP All
little-cartoon-10569
03/09/2021, 11:41 PMenough-leather-70274
03/09/2021, 11:43 PMfrom_port
?little-cartoon-10569
03/09/2021, 11:44 PMFor the ICMP protocol, you must also specify the ICMP type and code. You can use -1 for the type or code to mean all types or all codes.
enough-leather-70274
03/09/2021, 11:49 PMToPort [...] A value of -1 indicates all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6 types, you must specify all codes.
little-cartoon-10569
03/10/2021, 12:42 AMenough-leather-70274
03/10/2021, 12:46 AMlittle-cartoon-10569
03/10/2021, 12:49 AM