disable ping

romel · 12-25-2004, 08:43 PM

How can I disable ping....I am using redhat linux 9...

fsbooks · 12-25-2004, 08:47 PM

Why do you want to do this? Or do you just not need it?

zxzx123 · 12-25-2004, 09:01 PM

At a guess you could just set the permissions so that it cannot be run by anbody apart from file owner (root), log in under root, and navigate to the directory, /bin and adjust the ping file's properties.

I would be interested to know if that has the desired effect, gl!

kaito · 12-28-2004, 06:06 AM

If you want not to reply ping(echo-request), change /proc/sys/net/ipv4/icmp_echo_ignore_all; do the following command.

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all

If you want to disallow ping, set proper permission to ping as zxzx123 said, or filter packets by using iptables; a example rule is following

iptables -a OUTPUT -j DROP -p icmp --icmp-type 8

im glad my advice to your help

whipermr5 · 12-28-2004, 08:15 AM

You can

Code:

mv /bin/ping /bin/ping.old

If you ever want ping again, you can type ping.old, or reverse the operation above.

romel · 12-30-2004, 11:50 PM

I have tried

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all

but it is not working......I have restarted my pc....but not working...

thanks....

Quote:

Originally posted by kaito
If you want not to reply ping(echo-request), change /proc/sys/net/ipv4/icmp_echo_ignore_all; do the following command.

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all

If you want to disallow ping, set proper permission to ping as zxzx123 said, or filter packets by using iptables; a example rule is following

iptables -a OUTPUT -j DROP -p icmp --icmp-type 8

im glad my advice to your help

kaito · 12-31-2004, 11:41 AM

Quote:

Originally posted by romel
I have tried

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all

but it is not working......I have restarted my pc....but not working...

thanks....

Could u tell me what is not working, romel? Replying to ping from another host, or Can ping command on the setting host? If the solution i said is set, you can do ping command on the host. This setting is only not to reply to ping from another host.

Tell us your situation detail

nikonos · 01-01-2005, 11:22 AM

The best is use iptables rule. You can allow ping from some IP ...

example:

iptables -a INPUT -p icmp -s 212.18.49.194 -j ACCEPT
iptables -a INPUT -p icmp -j DROP

iptables -a OUTPUT -p icmp -j DROP

Regards,

Miha