Visit Jeremy's Blog.
Go Back > Forums > Linux Forums > Linux - Networking
User Name
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.


  Search this Thread
Old 10-18-2004, 07:24 PM   #1
LQ Newbie
Registered: Oct 2004
Location: Canada
Posts: 18

Rep: Reputation: 0
iptables DROP icmp applied, still being pinged

I can't get iptables to work, I tried this easy example just to start, but the box is still pingable.

iptables -A INPUT -s 24.x.x.x -p ICMP -j DROP

I am still pingable from 24.x.x.x machine

I also tried exclusively,

iptables -A INPUT -p ICMP -j DROP

Last edited by linuxistan; 10-18-2004 at 07:27 PM.
Old 10-18-2004, 07:26 PM   #2
LQ Newbie
Registered: Oct 2004
Location: Canada
Posts: 18

Original Poster
Rep: Reputation: 0
correction: I am still pingable from 24.x.x.x machine.
Old 10-18-2004, 08:47 PM   #3
LQ Veteran
Registered: Feb 2003
Location: Maryland
Distribution: Slackware
Posts: 7,803
Blog Entries: 1

Rep: Reputation: 416Reputation: 416Reputation: 416Reputation: 416Reputation: 416
The order of the rules in iptables matters. Is there a rule ahead of your icmp rule that could be accepting the packets?
Old 10-18-2004, 10:26 PM   #4
LQ Newbie
Registered: Aug 2002
Location: Slackware, KS
Distribution: Slackware
Posts: 12

Rep: Reputation: 0
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
iptables - drop all -> allow needed OR allow all -> drop specific lucastic Linux - Security 5 12-21-2004 02:07 AM
iptables how drop ip address issin Linux - Networking 4 09-02-2004 06:45 AM
iptables DROP command mm_jth Linux - Security 5 11-07-2003 11:22 AM
iptables icmp limits dunkyb Linux - Security 0 05-08-2003 05:10 PM
iptables -> DROP -> CLAGGS geoffj Linux - Networking 12 03-23-2003 05:26 AM

All times are GMT -5. The time now is 03:55 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration