VoyForums
[ Show ]
Support VoyForums
[ Shrink ]
VoyForums Announcement: Programming and providing support for this service has been a labor of love since 1997. We are one of the few services online who values our users' privacy, and have never sold your information. We have even fought hard to defend your privacy in legal cases; however, we've done it with almost no financial support -- paying out of pocket to continue providing the service. Due to the issues imposed on us by advertisers, we also stopped hosting most ads on the forums many years ago. We hope you appreciate our efforts.

Show your support by donating any amount. (Note: We are still technically a for-profit company, so your contribution is not tax-deductible.) PayPal Acct: Feedback:

Donate to VoyForums (PayPal):

[ Login ] [ Contact Forum Admin ] [ Main index ] [ Post a new message ] [ Search | Check update time | Archives: 1, [2] ]

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Date Posted: 06:40:36 03/23/07 Fri
Author: Anandan
Subject: Disabling and enabling response to a ping call
In reply to: Anandan 's message, "Ping" on 02:53:42 01/19/07 Fri

Disable ping response

What is a ping:

Usually a ping is used to check if a machine is up and to check the network status.

It is a small network packet sent to the machine. If the machine is up, an answer will be sent. The time needed to get the answer is called ping time or round-trip time.

The ping response from an IP indicates the machine is up.

Unfortunately this can be used to quickly scan an IP-range for reachable hosts.

This can be used to find potential hackable machines. If your machine doesn't answer to pings, your chance to be seen is reduced. (That doesn't mean your machine is more secure, the machine is just not that easy to be seen from the internet. Nothing more.)

How do I disable the ping response?

Add the following line to your init script for the network (the name depends on the distribution you use):

echo 1>/proc/sys/net/ipv4/icmp_echo_ignore_all

This disables ping responses.

To reenable, use the following command:

echo 0>/proc/sys/net/ipv4/icmp_echo_ignore_all

An alternative is to set the following into /etc/sysctl.conf (if you have such a file)

net.ipv4.conf.icmp_echo_ignore_all = 1

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Replies:

  • Ping broadcasting to find IP address of many hosts on the local network -- Anandan, 07:24:52 07/11/07 Wed
    [ Contact Forum Admin ]

    Forum timezone: GMT-8
    VF Version: 3.00b, ConfDB:
    Before posting please read our privacy policy.
    VoyForums(tm) is a Free Service from Voyager Info-Systems.
    Copyright © 1998-2019 Voyager Info-Systems. All Rights Reserved.