1

I can't seem to block ping requests to my server. I also followed the following post: Block ICMP timestamp & timestamp reply with firewalld

# firewall-cmd --zone=public --list-all
public
  target: default
  icmp-block-inversion: no
  interfaces: 
  sources: 
  services: dhcpv6-client http ssh
  ports: 
  protocols: 
  masquerade: no
  forward-ports: 
  sourceports: 
  icmp-blocks: echo-reply timestamp-reply timestamp-request
  rich rules: 

# firewall-cmd --get-icmptypes
destination-unreachable echo-reply echo-request parameter-problem redirect router-advertisement router-solicitation source-quench time-exceeded timestamp-reply timestamp-request

And I also did a reload (firewall-cmd --reload), but was still able to ping my server. I'm not sure what else I have to do in order to block pings to my server.

Ben
  • 111

0 Answers0