|
Posted by Eric Lubow
|
Some attackers, prior to attacking a host, (or users nmaping a host) will check to see if the host is alive. They do this by 'ping'ing the host. In order to check if the host is up, they will use an ICMP echo request packet.
To disallow these types of packets, use iptables:
iptables -A INPUT -p icmp --icmp-type echo-request -j DROP
Powered by AkoComment! |