linux禁止ping的实现实例
<p><strong>linux禁止ping的实现实例</strong></p>
<p>
<strong>1、临时禁止PING操作的命令为</strong><span>：#echo 1>/proc/sys/net/ipv4/icmp_echo_ignore_all</span></p>
<p>
<strong>2、永久禁止PING配置方法</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_351969">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">/etc/sysctl</code><code class="bash plain">.conf 中增加一行</code>
</div>
<div class="line number2 index1 alt1">
</div>
<div class="line number3 index2 alt2">
<code class="bash spaces"> </code><code class="bash plain">net.ipv4.icmp_echo_ignore_all=1</code>
</div>
<div class="line number4 index3 alt1">
</div>
<div class="line number5 index4 alt2">
<code class="bash spaces"> </code><code class="bash plain">执行sysctl -p生效</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong>防火墙方式：</strong></p>
<p>
<strong> 1、允许PING设置 </strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_309910">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">iptables -A INPUT -p icmp --icmp-</code><code class="bash functions">type</code> <code class="bash functions">echo</code><code class="bash plain">-request -j ACCEPT</code>
</div>
<div class="line number2 index1 alt1">
</div>
<div class="line number3 index2 alt2">
<code class="bash plain">iptables -A OUTPUT -p icmp --icmp-</code><code class="bash functions">type</code> <code class="bash functions">echo</code><code class="bash plain">-reply -j ACCEPT</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
或者也可以临时停止防火墙操作的。</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_546225">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">service iptables stop</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
<strong> 2、禁止PING设置</strong></p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_234229">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">iptables -A INPUT -p icmp --icmp-</code><code class="bash functions">type</code> <code class="bash plain">8 -s 0</code><code class="bash plain">/0</code> <code class="bash plain">-j DROP</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
感谢阅读，希望能帮助到大家，谢谢大家对本站的支持！</p>
<p>
原文链接：http://www.cnblogs.com/zjd2626/p/6380658.html</p>
頁:
[1]