block icmp request

[cguan_77]

hi guys, please help to give some insight on how to block ICMP or ping request in a web server? thanks..

[Salem]

Which OS?
Which webserver?
Which firewall?
You know, basic information about your setup.

[sknake]

In addition to the information Salem requested here is one way to go about it:

IANA Numeric ICMP Types:
http://www.iana.org/assignments/icmp-parameters

iptables block on type:

${IPTABLES} -A INPUT -p icmp --icmp-type 8 -j DROP

DO NOT join the rest of the world and block all ICMP traffic.

iptables man page:

TCPMSS
This target allows to alter the MSS value of TCP SYN packets, to control the maximum size for that connection (usually limiting it to your outgoing interface's MTU minus 40). Of course, it can only be used in conjunction
with -p tcp. It is only valid in the mangle table.
This target is used to overcome criminally braindead ISPs or servers which block ICMP Fragmentation Needed packets. The symptoms of this problem are that everything works fine from your Linux firewall/router, but machines
behind it can never exchange large packets:

[cguan_77]

thanks..for the replies.. :)