Stop Ping??

Hi all,

I am using RH7.3 and I put the following line in the file /etc/rc.d/init.d/iptables

echo "1" > /proc/sys/net/ipv4/ icmp_echo_ignore_broadcasts

but, still some one can ping my machine and gets the reply(my friends can confirm it from their machines).


I changed the line to

echo 1 > /proc/sys/net/ipv4/ icmp_echo_ignore_broadcasts

the result is the same.

I did something wrong?(different file or different file folder????)

Your kind help(hint or info or any idea) will be appreciated greatly

Robb

"Robb" <(E-Mail Removed)> schreef in bericht
news:38Tsb.816$(E-Mail Removed) .com...
> Hi all,
>
> I am using RH7.3 and I put the following line in the file
/etc/rc.d/init.d/iptables
>
> echo "1" > /proc/sys/net/ipv4/ icmp_echo_ignore_broadcasts
>
> but, still some one can ping my machine and gets the reply(my friends can
confirm it from their machines).
>
>
> I changed the line to
>
> echo 1 > /proc/sys/net/ipv4/ icmp_echo_ignore_broadcasts
>
> the result is the same.
>
> I did something wrong?(different file or different file folder????)
>
> Your kind help(hint or info or any idea) will be appreciated greatly
>
> Robb
>

A ping to one specific machine is not a broadcast,
that´s why your machine still replies.
Try echo 1 > /proc/sys/net/ipv4/ icmp_echo_ignore_all

Robb wrote:

> Hi all,
>
> I am using RH7.3 and I put the following line in the file
> /etc/rc.d/init.d/iptables
>
> echo "1" > /proc/sys/net/ipv4/ icmp_echo_ignore_broadcasts
>
> but, still some one can ping my machine and gets the reply(my friends can
> confirm it from their machines).
>
>
> I changed the line to
>
> echo 1 > /proc/sys/net/ipv4/ icmp_echo_ignore_broadcasts
>
> the result is the same.
>
> I did something wrong?(different file or different file folder????)
>
> Your kind help(hint or info or any idea) will be appreciated greatly
>
> Robb

That option is to stop your machine from responding to this sort of thing:

PING 192.168.15.255 (192.168.15.255) 56(84) bytes of data.
64 bytes from 192.168.15.130: icmp_seq=1 ttl=64 time=0.120 ms
64 bytes from 192.168.15.254: icmp_seq=1 ttl=128 time=1.94 ms (DUP!)
64 bytes from 192.168.15.129: icmp_seq=1 ttl=255 time=2.05 ms (DUP!)
64 bytes from 192.168.15.130: icmp_seq=2 ttl=64 time=0.055 ms
64 bytes from 192.168.15.254: icmp_seq=2 ttl=128 time=1.04 ms (DUP!)
64 bytes from 192.168.15.129: icmp_seq=2 ttl=255 time=1.65 ms (DUP!)
64 bytes from 192.168.15.130: icmp_seq=3 ttl=64 time=0.055 ms
64 bytes from 192.168.15.254: icmp_seq=3 ttl=128 time=1.00 ms (DUP!)
64 bytes from 192.168.15.129: icmp_seq=3 ttl=255 time=1.61 ms (DUP!)



--
Donovan Hill