linux 禁用ICMP

如何让别人ping不到自己，而自己又能ping别人,问题其实很简单，用如下脚本+tcpdump(tcpdump icmp -n -i eth0),脚本内容如下:

#/bin/bash
-F
iptables -F -t nat
iptables -X
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp -m multiport –dport 80,22 -j ACCEPT
iptables -A INPUT -p icmp –icmp-type 0 -j ACCEPT

iptables -A OUTPUT -o lo -j ACCEPT
iptables -A OUTPUT -m state –state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -p tcp -m multiport –sport 80,22 -j ACCEPT
iptables -A OUTPUT -p icmp –icmp-type 8 -j ACCEPT

CCIE Security 2009 IOS防火墙合集