Проблема с iptables, как запретить отвечать на пинги

Reply to this topic

Posted October 25, 2003 · Report post

Из подсети 192.168.1.0(eth1) в подсеть 10.10.0.0(eth0) запретить хождение пингов.

iptables -A INPUT -s 192.168.1.0/24 -p icmp --icmp-type echo-request -j DROP

iptables -A INPUT -s 192.168.1.0/24 -p icmp --icmp-type echo-reply -j DROP

пишу такие команды... но

[root@m172 root]# tcpdump -i eth1

tcpdump: listening on eth1

13:33:05.054777 192.168.1.55 > 192.166.244.243: icmp: echo request

13:33:05.065037 192.168.1.55 > 192.166.244.244: icmp: echo request

[root@m172 root]# tcpdump -i eth0

tcpdump: listening on eth0

13:33:36.905030 m172.eastnet.lan > 192.167.1.107: icmp: echo request

13:33:36.912746 m172.eastnet.lan > 192.167.1.108: icmp: echo request

Posted October 25, 2003 · Report post

А где пишешь то? Если на роутере, который эти сетки соединяет, то пиши в цепочку FORWARD

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

Only 75 emoji are allowed.

× Your link has been automatically embedded. Display as a link instead

× Your previous content has been restored. Clear editor

× You cannot paste images directly. Upload or insert images from URL.

Followers 0