[SOLVED] How to drop ICMP flood attack using IP tables

naba09 · 12-10-2014, 08:24 PM

I have created this paclet using IP tables:
pkt = IP(dst='192.168.1.132')/ICMP()

and flooding it this way:
srloop(pkt,inter=0.1,count=30)

now I want to drop all these packets using IPtables.
please guide.

/dev/random · 12-11-2014, 12:30 PM

Quote:

Originally Posted by naba09

I have created this paclet using IP tables:
pkt = IP(dst='192.168.1.132')/ICMP()

and flooding it this way:
srloop(pkt,inter=0.1,count=30)

now I want to drop all these packets using IPtables.
please guide.

On the server you want icmp to be blocked:
iptables -A INPUT -i <interface> -p icmp --icmp-type echo-request -j DROP