Interrupting worms How To?

pazvant · 10-17-2003, 07:49 AM

In our company we use linux gateway (iptables based).But now adays we got lots of ICMP traffic, how can i stop this.Our link is to slow.With Iptables rules worms can be stopped?? Or Doyou advice something different??

pazvant · 10-17-2003, 07:50 AM

Iptables Rules

jayjwa · 10-17-2003, 07:27 PM

I do it thru /proc/sys, look in /proc/sys/net/ipv4

echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all

But don't quote me on this one....

unSpawn · 10-19-2003, 06:14 PM

Worm will try to propagate by scanning network ranges. If you have no dealings with these ranges, and if you have vulnerable systems add blocking rules. Adding an IDS like Snort should prove beneficial too.