Ignoring icmp echo request

[Randy Mikesell]

Is there a way to ignore icmp echo request in HP-UX 11? I know I can use ipfilter, but I am trying to find a network parameter of kernel hack that I can use.

Thanks,

Randy

[Wodisch_1]

Hi Randy,

read the man page for "ndd", as that would be the tool for you.
"ndd -h|more" shows all the parameters, like "ip_respond_to_*" (which are "un-supported", though).

HTH,
Wodisch

[U.SivaKumar_2]

Hi,
It cannot be done in HP-UX unless you use some IP filtering software.

regards,
U.SivaKumar

[James Beamish-White]

Hiya,

try ndd -set /dev/ip ip_respond_to_echo_broadcast 0

And search the forum for Bastion Host and you'll find the documentation re: hardening a system, which includes a few ndd tuning commands (including this one)

Cheers!
James