Hi

Look at this: http://www.phpweb.biz/2703.png

Today i block the host generating outgoing traffic, but i have no luck to block incoming

what i did:
1) echo "1" > icmp_echo_ignore_all
2) /sbin/iptables -A INPUT -p icmp --icmp-type echo-request -j DROP

Even i block IP, my server receive "echo request" and it generate traffic.

I tried
/usr/local/sbin/iptables -A INPUT -p icmp -s carcass.ne.client2.attbi.com --icmp-type echo-request -j DROP
but i still see
04:29:01.680000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
04:29:01.690000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
04:29:01.710000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
04:29:01.720000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
04:29:01.740000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
04:29:01.750000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
04:29:01.770000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
04:29:01.780000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request


How to fix it?


thank you

This is an "echo request". Ie you cant stop me, for instance, to request to talk to you, you can only not say anything back to me.

Same thing with ping. The only way to not see an "echo request" is to unplug your network card.

Hope this helps