怎么才能不响应别人的ping呀

卐伪装卐

[color=Green]使对任何ping请求不响应，重启后有效？怎么设的呀！请还记得的指教下，谢谢！！！

obsd178

2楼正解不要重启 亦可以修改 /etc/sysctl 相关键值

卐伪装卐

回复 3# obsd178


    嗯，/proc是个虚拟目标，重启就没有了，应该放在/etc/sysctl里的，

chenyx

修改/etc/sysctl 键值,重启有效

obsd178

修改/etc/sysctl 键值,重启有效
chenyx 发表于 2010-09-03 21:02

    sysctl -p 即可生效！

ulovko

http://blog.chinaunix.net/uid-25256412-id-91426.html

Ipsysctl-tutorial:  http://www.frozentux.net/documents/ipsysctl-tutorial/

1. 【With the sysctl application】：
   
2. The sysctl application can be used to either set variables through the command line, or to set a larger set of variables through a configuration file as previously described. sysctl may also set several variables through the command line at once if need be, and it may also be used to list all variables and their respective values.
   
3. 
   
4. 1.1. First of all, to list all variables possible you could issue the following command:
   
5. 
   
6. [root@rhel5 ~]# sysctl -a  →→ to list all variables
   
7. [root@rhel5 ~]# sysctl net.ipv4.tcp_sack   →→ to read a specific variable
   
8. [root@rhel5 ~]# sysctl -w net.ipv4.tcp_sack=0  →→ to set a value
   
9. 
   
10. 1.2. Reload /etc/sysctl.conf
    
11. [root@rhel5 ~]# sysctl -p  →→ to load all of the settings we have in the /etc/sysctl.conf file
    
12. [root@rhel5 ~]# sysctl -p /etc/testsysctl.conf →→ load the testsysctl.conf configuration options instead of our default file
    
13. 
    
14. 【With /proc】：
    
15. 1.1. It may be a very bad idea to turn on ip_forward before we have all the firewall rules and routes up and running.
    
16. 
    
17. [root@rhel5 ~]# echo "1" > /proc/sys/net/ipv4/tcp_sysncookies →→ 默认值是1,开启防御SYN Flood攻击
    
18. [root@rhel5 ~]# echo "1" > /proc/sys/net/ipv4/ip_forward →→ 默认值是0,开启ip_forward
    
19. 
    
20. 1.2.icmp_echo_ignore_all
    
21. If this is variable is turned on, you and others will be unable to ping the machine in question which is generally a bad thing. Of course, everyone has different opinions about this,
    
22. 
    
23. some say it is good because people will be unable to ping you and hence know you are there, some say it is bad because you want people to know you are available on the internet.
    
24. 
    
25. A lot of tools and applications rely upon ICMP Echo requests, some good, some bad as always.
    
26. 
    
27. [root@rhel5 ~]# echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all →→默认值是0,所谓的(Disable death of PING);
    

复制代码