%-> I had to block the ICMP packets in my router to stop this. I
%-> don't know of
%-> a way, if there even is one, that you can block ICMP packets at the
%-> computer. I'm pretty sure it has to be done from the router.

Correct me if I'm wrong, but blocking ICMP completely isn't such a good
idea, as it breaks stuff. The hosts won't be able to work out the right MTU
because they don't see the ICMP error messages, and you'll end up with
packet loss and performance degradation.

Block ICMP type 8 and 0 (echo and echo_reply) temporarily, and only from the
abusive host(s). If someone really is ping flooding you, contact the
person's ISP or upstream provider and have them pull the plug on the abuser.

IPCHAINS can be used to filter ICMP, but make sure you know what you're
doing first.

-- Juha




-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to