How to damage ICMP ping offers on your Linux server?
Ping management is going on posting an Internet Control Information Protocol (ICMP) echo request packets to the target host and waiting for an ICMP reply. To enable the PING refer to the resulting URL and make sure that you have logged in as a root user.
echo “0″ >> /proc/sys/net/ipv4/icmp_echo_ignore_all
To check the ICMP attack, most of the servers is disabled the PING command to adjust the server, refer to the following instruction to damage the PING command.
echo “1″ >> /proc/sys/net/ipv4/icmp_echo_ignore_all
You can disable ping request trough sysctl.conf
: net.ipv4.icmp_echo_ignore_all = 1
Then run “sysctl -p”
To disable incoming and outgoing ping request on your CSF firewall, please try the following values in your csf.conf file.
ICMP_IN = "0" ICMP_IN_RATE = "0" ICMP_OUT = "1" ICMP_OUT_RATE = "0"
How do I disable outgoing ICMP request on iptables?
iptables -A OUTPUT -p icmp --icmp-type echo-request -j DROP or iptables -A OUTPUT -p icmp --icmp-type 8 -j DROP
To disable incoming ping request on iptables, please use the following command.
iptables –A INPUT –p icmp –icmp-type echo-request –j DROP