Koozali.org: home of the SME Server

Any way to stop my server from replying to a ping?

Offline Drifting

  • *****
  • 431
  • +0/-0
Any way to stop my server from replying to a ping?
« on: January 25, 2004, 07:56:05 PM »
Sorry if this is an FAQ, I have searched though the site as best I could.

What I really want to do is stop my server replying to a ping? is it possible? I have noticed in my snort logs that our ISP seems to be suffering from windows machines with worms? or something? The log always starts with a ping, then proceeds to do a port scan. However I have another server on the same ADSL line (With another IP) which has MS ISA server, which I have managed to stop responding to ping requests, and that very rarely gets port scanned.

I have SME 5.6 with latest patches.

Have I lost the plot over this? as I am a newbie to SME and Linux.

Drift. :-(
Infamy, Infamy, they all have it in for me!

bobk

Any way to stop my server from replying to a ping?
« Reply #1 on: January 26, 2004, 01:20:20 AM »
This is a very old subject. Try searching first.

I you are trying to stop Cyberkit ICMP Pings, check out this thread: http://forums.contribs.org/index.php?topic=18665.msg73540#msg73540

Mark030

Funny you should ask...
« Reply #2 on: January 26, 2004, 04:53:51 AM »
I just did this to my own firewall.  There is probably an easier/better way of doing this, but it works.

copy: /etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustICMPIn
to: /etc/e-smith/templates-custom/etc/rc.d/init.d/masq/90adjustICMPIn
edit the section: my @OKicmpTypes
Remove the line that says: echo-request
run: /sbin/e-smith/expand-template /etc/rc.d/init.d/masq
run: service masq restart

Try a firewall tester like Shields-up at http://www.grc.com to see if you can be pinged.

Hope that helps  :-D

- Mark

Muzo

Any way to stop my server from replying to a ping?
« Reply #3 on: January 26, 2004, 10:25:17 AM »
Hi,

Try this contrib: http://no.longer.valid/mylinks/visit.php?cid=123&lid=371

And there is a How To here :
How To

Offline Drifting

  • *****
  • 431
  • +0/-0
Thank you all
« Reply #4 on: January 26, 2004, 10:24:13 PM »
Thanks for the responses, Bobk was spot on it was the Cyberkit!

The howto did the trick.

Regards Drift.
Infamy, Infamy, they all have it in for me!