Linux Server Prohibition Ping Response (ICMP)

Little scum · Posted on 3/3/2026 8:24:08 PM

review

A brief introduction to network ICMP (Internet Control Message Protocol).
https://www.itsvse.com/thread-11201-1-1.html

net.ipv4.icmp_echo_ignore_all = 1 is a Linux kernel parameter setting that controls how the system responds to ICMP Echo requests (often called pings). When this parameter is set to 1, it means that the system will ignore all received ICMP Echo Request messages and will not send any ICMP Echo Reply responses. In other words, pinging the host is prohibited.

function

Security Enhancements: By turning off responses to external ping requests, you can increase the security of your server to some extent, as attackers cannot easily probe whether your server is online through pings.
Reduced network traffic: If the server is located in a high-traffic environment, turning off ping responses can reduce the burden of unnecessary network packet processing.

Temporary closure

The command is as follows:

Login is visible.

Permanently closed

Edit the /etc/sysctl.conf file and add the following at the bottom:

Login is visible.

Then, reload it to take effect with the following command:

Login is visible.

[linux] Linux Server Prohibition Ping Response (ICMP)

Related Posts