icmp settings

chapzilla · 08-07-2003, 10:15 AM

My sysctl.conf file is being modified by some program somehow at some time. I have no idea how, what, or why.

net.ipv4.icmp_echo_ignore_broadcasts=0
net.ipv4.icmp_echo_ignore_all = 0

become

net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.icmp_echo_ignore_all = 1

mysteriously. Help me please.

chapzilla · 08-07-2003, 10:23 AM

Geez! And, the line ALL EXCEPT 127.0.0.1

ENY shows up in /etc/hosts.deny

stickman · 08-07-2003, 10:44 AM

That's actually a good entry in your hosts.deny. Add whatever you want to allow in to hosts.allow. The docs distributed with TCP wrappers state that any connection that does not match something in either file is allowed. So in essense, an empty hosts.deny would allow any connection through.