LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 06-20-2002, 02:46 PM   #1
pilot1
Member
 
Registered: Jun 2002
Location: USA
Distribution: Gentoo, Fedora Core
Posts: 408

Rep: Reputation: 30
Not responding to pings


I've read that it is possible to set Linux up to not respond to pings. First of all would this cause IRC to stop working, because I would get a ping timeout? If it wouldn't how can I set up my computer to not respond to pings?
 
Old 06-20-2002, 03:23 PM   #2
Stephanie_new
Member
 
Registered: May 2002
Location: Hell, A.K.A. Arizona
Distribution: MD 8x / WIN2K / QNX
Posts: 156

Rep: Reputation: 30
This would be refering to setting up a firewall.

And yes, you can set that up. It is the best method to avoid and atttack. If the cracker does not get a response, he would assume that the IP does not exist. He would then move on.
 
Old 06-20-2002, 03:24 PM   #3
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974
no, irc will still work.

you need to setup up your firewall to drop certain ICMP packets. personally i don't know shit about iptables yet, so i just use firestarter to set it up, works fine, and very easy to install
 
Old 06-20-2002, 03:34 PM   #4
Stephanie_new
Member
 
Registered: May 2002
Location: Hell, A.K.A. Arizona
Distribution: MD 8x / WIN2K / QNX
Posts: 156

Rep: Reputation: 30
Holy crap, Acid has admitted to not knowing something!

Everyone clear the building! The world is ending!


Sorry... the opportunity was there. I just had to take it
 
Old 06-20-2002, 03:51 PM   #5
shoot2kill
Member
 
Registered: Jan 2002
Location: California
Distribution: Red Hat
Posts: 402

Rep: Reputation: 30
Gosh...Stephanie, you are a good flamer when your chance hits....

well, i like to see how Acid strikes back, hehehe....
 
Old 06-20-2002, 03:52 PM   #6
Stephanie_new
Member
 
Registered: May 2002
Location: Hell, A.K.A. Arizona
Distribution: MD 8x / WIN2K / QNX
Posts: 156

Rep: Reputation: 30
Well thank you kind sir.

I await your response master kewpie....

 
Old 06-20-2002, 03:58 PM   #7
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974Reputation: 1974
my response...

i know shit about most things.... i jsut don't reply to those things how about a fun bit of detectiong work... read my last 2000 posts and deduce what i don't know
 
Old 06-21-2002, 08:02 AM   #8
pilot1
Member
 
Registered: Jun 2002
Location: USA
Distribution: Gentoo, Fedora Core
Posts: 408

Original Poster
Rep: Reputation: 30
Where can I get firestarter or learn how to set up the tables?
 
Old 06-21-2002, 08:31 AM   #9
X11
Member
 
Registered: Dec 2001
Location: Brisie, Australia
Distribution: Slackware 8.1
Posts: 324

Rep: Reputation: 30
You can find Firestarter here.
 
Old 06-21-2002, 08:33 AM   #10
X11
Member
 
Registered: Dec 2001
Location: Brisie, Australia
Distribution: Slackware 8.1
Posts: 324

Rep: Reputation: 30
Quote:
Originally posted by acid_kewpie
my response...

i know shit about most things.... i jsut don't reply to those things how about a fun bit of detectiong work... read my last 2000 posts and deduce what i don't know
Acid you spend too much time posting that's why.
 
Old 06-21-2002, 08:42 AM   #11
orgcandman
Member
 
Registered: May 2002
Location: dracut MA
Distribution: Fedora, RHEL
Posts: 600

Rep: Reputation: 109Reputation: 109
iptables is both easy and fun

basically it works like this:

The kernel has tables to which you can add entries telling it how to behave when it sees a packet

INPUT
OUTPUT
FORWARD

The names should be self explanatory.

Flushing the tables turns on a basic "Do whatever the packet says" mode.

/sbin/iptables -F {table name}

After flushing your tables, you need to add a default policy (Don't stick with the linux defaults of "accept")

/sbin/iptables -P {table name} {policy}

where policy can be drop or accept

then just add chains to the table

/sbin/iptables -A {table name} {opts}

so to deny your ping requests:

/sbin/iptables -A INPUT -i eth0 -p icmp --icmp-type destination-unreachable -j DROP
/sbin/iptables -A INPUT -i eth0 -p icmp --icmp-type time-exceeded -j DROP
/sbin/iptables -A INPUT -i eth0 -p icmp --icmp-type echo-reply -j DROP

should do the trick
 
Old 06-21-2002, 08:45 AM   #12
shoot2kill
Member
 
Registered: Jan 2002
Location: California
Distribution: Red Hat
Posts: 402

Rep: Reputation: 30
Quote:
Originally posted by X11
Acid you spend too much time posting that's why.
and you know shit about Acid....hehe

Kidding!
 
Old 06-22-2002, 11:21 AM   #13
pilot1
Member
 
Registered: Jun 2002
Location: USA
Distribution: Gentoo, Fedora Core
Posts: 408

Original Poster
Rep: Reputation: 30
orgcandman, If I copy that into my kernel thingy will IRC respond to pings?
 
Old 06-24-2002, 09:15 AM   #14
orgcandman
Member
 
Registered: May 2002
Location: dracut MA
Distribution: Fedora, RHEL
Posts: 600

Rep: Reputation: 109Reputation: 109
heh, I forgot to say that eth0 should be replaced with whatever interface you connect to the interface with.

And IRC pings through the connection you've established, so you're all set
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
no pings mrbeeye *BSD 2 05-24-2004 06:49 PM
Pings gbell72 Linux - Networking 2 09-29-2003 09:09 AM
I can't get pings :( dadinou Linux - Networking 4 09-07-2003 04:03 PM
Lost pings! Stan Cash Linux - Networking 3 11-15-2002 06:18 PM
Pings go way up after a day Griffon26 Linux - Networking 4 10-08-2001 12:44 PM


All times are GMT -5. The time now is 10:10 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration