icmp_echo_ignore_all, but incoming ICMP packets still target our host 20:44:22.590000 carcass.ne.client2.attbi.com > 13094..."/>

ICMP attack! how to block?

Look at this: http://www.h2hosting.com/t.php?interface=eth0

We set echo "1" > icmp_echo_ignore_all,
but incoming ICMP packets still target our host

20:44:22.590000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:22.610000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:22.750000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:22.820000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:22.820000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:22.980000 hnllhi1-ar1-4-63-132-102.hnllhi1.vz.dsl.gtei.net > 1309417189.vosn.net: icmp: echo request
20:44:22.990000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:22.990000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.000000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.090000 hnllhi1-ar1-4-63-132-102.hnllhi1.vz.dsl.gtei.net > 1309417189.vosn.net: icmp: echo request
20:44:23.090000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.100000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.410000 hnllhi1-ar1-4-63-132-102.hnllhi1.vz.dsl.gtei.net > 1309417189.vosn.net: icmp: echo request
20:44:23.410000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.420000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.440000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.440000 hnllhi1-ar1-4-63-132-102.hnllhi1.vz.dsl.gtei.net > 1309417189.vosn.net: icmp: echo request
20:44:23.450000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.460000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.480000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.480000 hnllhi1-ar1-4-63-132-102.hnllhi1.vz.dsl.gtei.net > 1309417189.vosn.net: icmp: echo request
20:44:23.490000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.500000 carcass.ne.client2.attbi.com > 1309417189.vosn.net: icmp: echo request
20:44:23.510000 hnllhi1-ar1-4-63-132-102.hnllhi1.vz.dsl.gtei.net > 1309417189.vosn.net: icmp: echo request


QUESTION: HOW to block them?

 

 

 

 

Top