Drop all icmp

This commit is contained in:
Bob Mottram 2014-02-27 13:40:49 +00:00
parent 2219eba217
commit 5211e85d4f
1 changed files with 3 additions and 3 deletions

View File

@ -597,10 +597,10 @@ iptables -A syn_flood -m limit --limit 1/s --limit-burst 3 -j RETURN
iptables -A syn_flood -j DROP
# Limiting the incoming icmp ping request:
iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 1 -j ACCEPT
iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 1 -j LOG --log-prefix PING-DROP:
#iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 1 -j ACCEPT
#iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 1 -j LOG --log-prefix PING-DROP:
iptables -A INPUT -p icmp -j DROP
iptables -A OUTPUT -p icmp -j ACCEPT
#iptables -A OUTPUT -p icmp -j ACCEPT
# Save the settings
iptables-save > /etc/firewall.conf