ICMP Off

[mfaisalkh]

Dear Frendz,

My server IP is 192.168.0.1 & my clients IP is 192.168.0.x
How can i block Ping Request from clients side to server.
plz tell me the steps-by-steps guide.

[jargon]

no such thing as step-by-step, except the old tv show,

this would req. modifying your iptables (firewall) rules,

Might want to check out Securing Linux...
http://www.openna.com/products/books/sol/solus.php

[funaki]

here a Howto on Iptables

http://www.siliconvalleyccie.com/linux- ... -intro.htm

in simple you can try adding this to your iptables configuration

iptables -A OUTPUT -p icmp --icmp-type echo-request -j Reject
iptables -A INPUT -p icmp --icmp-type echo-reply -j reject

now if u want server to send out icmp you can in the first line Add Accept instead of reject and vise versa.

[linuxgeek]

Salams

or an easy way can be

root@googy:/proc/sys/net/ipv4# echo 1 > icmp_echo_ignore_all


it will block all ping request no need for iptables for this.

regards

~uppal

[lambda]

or an easy way can be

root@googy:/proc/sys/net/ipv4# echo 1 > icmp_echo_ignore_all

that's a bad idea. you want client machines to see icmp unreachable and other messages.

[linuxgeek]

but thats what he said... take a look at his message!

Dear Frendz,

My server IP is 192.168.0.1 & my clients IP is 192.168.0.x
How can i block Ping Request from clients side to server.
plz tell me the steps-by-steps guide.

[LinuxFreaK]

Dear linuxgeek,
Salam,

# echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all

I think he need to put this command in /etc/rc.d/rc.local because when his computer reboot he will need to give this command again.

Best Regards.

[lambda]

you should set net.ipv4.icmp_echo_ignore_all = 1 in /etc/sysctl.conf instead of adding that command to /etc/rc.local. however, again, you don't want to do this. this will block a lot of useful icmp messages.

why do i get an error while trying to quote-reply to messages here? i get

Sorry, but only can reply to posts in this forum.

the missing noun in that sentence makes me believe it's a bug.

[lambda]

oh, great. now when i try to edit my posts, i get

Sorry, but you can only edit your own posts.