Blocking Ping (ICMP) responses in Linux can be an effective way to improve security and reduce unnecessary network traffic. Ping is a commonly used network diagnostic tool that sends a packet to a network device and waits for a response. By default, Linux systems respond to Ping requests, but you can disable this feature using the following steps.
Step 1: Check if ICMP is enabled
Before you proceed with the steps, you need to check if ICMP is enabled on your system. To do this, open a terminal and type the following command:
If the output is
net.ipv4.icmp_echo_ignore_all = 0, it means that ICMP is enabled, and you can proceed with the next steps.
Step 2: Disable ICMP responses
To disable ICMP responses, you need to edit the sysctl.conf file. This file contains system-wide settings that are loaded during boot time. Open the file in a text editor with root privileges:
sudo nano /etc/sysctl.conf
Add the following line at the end of the file:
Save the file and exit the editor. Then reload the sysctl settings with the following command:
sudo sysctl -p
This will apply the new setting immediately. From now on, your Linux system will not respond to Ping requests.
Step 3: Verify the changes
To verify that the changes have been applied, try to Ping your Linux system from another device on the network. If the Ping command returns no response, it means that ICMP has been successfully disabled.
Disabling ICMP responses in Linux can be a useful security measure to prevent network attacks and reduce unnecessary traffic. By following the steps outlined above, you can easily block Ping requests and improve the security of your system.
this will block all the icmp request even if i add my legitimate ip into the truested zone. cloud you please guide how to allow specific ip address using firewalld not iptables.
Nice Bro Thank You Thats Work For ME!
i am using centos 7 . i want to disable icmp ping in my centos machine.
and i already apply those command Disable Ping using iptables..but not works!!
i want to solution..
Change DROP to ACCEPT
Hi, i disabled ping using this command chain “# iptables -A INPUT -p icmp –icmp-type echo-request -j DROP”, how can i enable it back?