[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: blocking icmp protocol



i can't disable the icmp with iptables
i made the following command

iptables -A INPUT -p icmp -s 192.168.1.125 -j DROP

but still  this ip can ping my host

Using iptables -A "appends" the rule to your INPUT chain. Iptables uses a "first match wins" approach. By appending this rule to the input chain, you are allowing all other existing rules to make a decision about these packets before the rule you are adding.

Try changing your rule to this:

iptables -I INPUT -p icmp -s 192.168.1.125 -j DROP

This will "insert" the rule at the top of the INPUT chain, instead of appending it at the bottom.

Hope this helps.

Barry



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]