Maoz wrote:
on iptables

iptables -A INPUT -p icmp -j DROP

Which is just a HORRID idea. If you want to block ping, block ping requests...

iptables -A INPUT -p icmp --icmp-type 8 -j DROP

...but for the LOVE OF THE INTERNET don't block destination-unreachable, source quench or time-exceeded messages. (icmp-type 3, 4 and 12 respectively). For your own troubleshooting, allow echo replies (icmp-type 0) as well.

Chris

Reply via email to