deny icmp

Winanjaya · 05-18-2009, 11:49 PM

How to deny icmp to and from my server..I use below command in my iptables .. but not working:

iptables -A INPUT -p icmp --icmp-type 8 -s 0/0 -d 192.168.1.123 -m state --state NEW,ESTABLISHED,RELATED -j REJECT
iptables -A OUTPUT -p icmp --icmp-type 0 -s 192.168.1.123 -d 0/0 -m stat
iptables -A OUTPUT -p icmp --icmp-type 0 -s 192.168.1.123 -d 0/0 -m state --state ESTABLISHED,RELATED -j REJECT

please help

thanks & regards

Winanjaya · 05-18-2009, 11:50 PM

iptables -A INPUT -p icmp --icmp-type 8 -s 0/0 -d 192.168.1.123 -m state --state NEW,ESTABLISHED,RELATED -j REJECT
iptables -A OUTPUT -p icmp --icmp-type 0 -s 192.168.1.123 -d 0/0 -m state --state ESTABLISHED,RELATED -j REJECT

win32sux · 05-19-2009, 08:27 AM

Quote:

Originally Posted by Winanjaya

How to deny icmp to and from my server.

Example:

Code:

iptables -I INPUT -p ICMP -i eth0 -j DROP
iptables -I OUTPUT -p ICMP -o eth0 -j DROP

Keep in mind that filtering ICMP does have side effects.