Disable ping request

[Manoj Misra]

Hi All,

I want to disable ping on HP 11 box. I need your expert help.

Thanks
Manoj

[Michael Tully]

Hi,

Seeing that 'ping' in in fact a binary, the easiest way would be to either move it somewhere out of the default path (recommended) or remove it completely including the man page. You could remove it also using 'swremove' and look for it in the core OS fileset.

# whereis ping
ping: /usr/sbin/ping /usr/share/man/man1m.Z/ping.1m

HTH
~Michael~

[Manoj Misra]

Hi Michael,

I want to disable ping request response from my system. System should not reply any ping request comming from network.

Thanks
Manoj

[Steven Sim Kok Leong]

Hi,

On HP-UX 11.X, you cannot disable ICMP echo response. On HP-UX 11i, you can rely on IPFilter/9000 (you need to purchase) to filter off different types of ICMP packets including ICMP echo requests. Alternatively, for both HP-UX 11.X and 11i, you can rely on third-party host-based firewall software such as netfilter's iptables to perform similar form of filtering.

On both HP-UX 11.X and 11i by default (without need for additional software), you can disable ICMP response to address mask request and ICMP response to timestamp request (which are bigger security issues than ICMP echo request). To disable ICMP response to address mask request and timestamp request, do this:

# ndd -set /dev/ip ip_respond_to_address_mask_broadcast 0
# ndd - set /dev/ip ip_respond_to_echo_broadcast 0
# ndd -set /dev/ip ip_respond_to_timestamp 0
# ndd -set /dev/ip ip_respond_to_timestamp_broadcast 0

Hope this helps. Regards.

Steven Sim Kok Leong

[Michael Tully]

I wasn't going to suggest 'ndd' seeing there is a current security bulletin about it.

I'm not sure why you would want to do this anyway unless you having firewall issues.

[T G Manikandan]

Manoj,
I think you cannot disable ping on a hpux machine.
YOu have to do that in your firewall.

Thanks

[Manoj Misra]

Hi All,

Is there any possibility in 10.20..?

Regards
Manoj

[Stefan Farrelly]

The ndd command on HP-UX 11 = the nettune command on 10.20