icmp

[Saravanan_14]

how to stop the icmp service in tru64?

[Vladimir Fabecic · Accepted solution]

Do the following:


# dbx -k /vmunix

(dbx) print icmp_rejectcodemask

0

(dbx) patch icmp_rejectcodemask=32

32

(dbx) quit

#


Reboot the system to boot with new kernel and it will not accept ICMP.

[Saravanan_14]

thank you very much

[Saravanan_14]

i have done the same, but i am able to the ping the server, after disable the icmp also.

(dbx) print icmp_rejectcodemask
32
(dbx)

[Al Licause]

You weren't very specific in your first request. Exactly which icmp functions are you trying to disable ? There are many.

If you look at /usr/sys/include/netinet/ip_icmp.h
you will see the definitions for the mask which is used to control icmp functions.

The list describes the power to which 2 must
be raised to disable the function ( I think ) so for example, in the above file you will see that the number 8 represents ICMP_ECHO.

Setting icmp_rejectcodemask to 256 (2^8) will disable echo responses.

This if you want to disable more than one function, you'll need to logically OR several masks until you find a value that disables the desired functions.

If someone else can explain this mask better than I, please do so.....

[Saravanan_14]

thanks for your replay,

i need to stop the icmp ping response.
if i try to ping the server, it should not response.

[Saravanan_14]

Hi Al Licause,

thanks lot, i have give icmp_rejectcodemask=256, the icmp echo response has stoped. now i could not ping my server.

thanks for all