LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Interrupting worms How To? (https://www.linuxquestions.org/questions/linux-security-4/interrupting-worms-how-to-105092/)

pazvant 10-17-2003 07:49 AM
Interrupting worms How To?
 
In our company we use linux gateway (iptables based).But now adays we got lots of ICMP traffic, how can i stop this.Our link is to slow.With Iptables rules worms can be stopped?? Or Doyou advice something different??

pazvant 10-17-2003 07:50 AM
Iptables Rules

jayjwa 10-17-2003 07:27 PM
I do it thru /proc/sys, look in /proc/sys/net/ipv4

echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all

But don't quote me on this one....

unSpawn 10-19-2003 06:14 PM
Worm will try to propagate by scanning network ranges. If you have no dealings with these ranges, and if you have vulnerable systems add blocking rules. Adding an IDS like Snort should prove beneficial too.


All times are GMT -5. The time now is 10:58 PM.