block ping from host to host using iptables (I am the wireless access point)

tris_halo · 07-13-2013, 11:44 PM

I'm really new to networking and linux system. So please help me in this:
- I have my phone acted as the wireless access point, and other devices like all my LAPTOPs connected to it to create a LAN network. How can I use iptables to block (for example ping request, reply) from host to host.

P/s: I also try to block forward chain using
iptables -A FORWARD -j DROP
But it doesn't work. Host A can still ping to Host B. The blocking forward chain only helps me to block them (hosts in LAN) access the internet.

Noway2 · 07-14-2013, 11:43 AM

IPtables is capable of working specifically with ICMP commands such as ping. For example, this will accept ping:

Code:

-A INPUT -p icmp -m icmp --icmp-type 8 -m state --state NEW,RELATED,ESTABLISHED -j accept

You can change the rules as desired. For example you can add a -s or -d to specify the source and/or destination, or you can specify an interface with -i (your modem probably uses a pseudo interface like ppp0).

See the following for more detailed information: http://www.cyberciti.biz/tips/linux-...icmp-ping.html