Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any way to hide a computer on LAN? For example maybe with a firewall, when someone is going to ping a machine, it won't answer. In other words the machine must answer to router only.

I am the network administrator. The switch hasn't VLAN. I use Linux (Debian)

My topology is this one:


share|improve this question

closed as off-topic by Xander, TildalWave, NULLZ, Gilles, Scott Pack Sep 21 '13 at 23:42

  • This question does not appear to be about Information security within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

Is your intention to have machines connected to your wireless access point be segregated from your network but still have internet access? – Brian Sep 20 '13 at 18:44
This question appears to be off-topic because it is about network configuration, which belongs on ServerFault or Network Engineering – Xander Sep 20 '13 at 19:02
Anonymity is however in my opinion an important aspect of Information Security. – Rohan Durve - Decode141 Sep 20 '13 at 19:57
My intention is to connect to switch. An internet connection would be good if there is a way I would like to learn it. Or without internet – S.I.Tsaklidis Sep 20 '13 at 20:04
What do you mean by “hide”? If you want your machine not to respond to ping (which is usually a bad idea), just configure it not to do that. – Gilles Sep 21 '13 at 12:52

According to this answer you can deny all incoming connections using iptables -p INPUT DROP as following:

iptables -I INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
iptables -p INPUT DROP

All incoming attempts to connect to your computer fails and only connections initiated by your computer works. So your machine won't respond to pings.

However you are still broadcasting ARP packets and connected to the router. You can't disable ARP requests because if you do you won't be able to use the network. So basically it is still visible according to this scenario.

share|improve this answer
So the only packets will be seen from my machine is ARP, this is good.My users use windows and the check the Network menu on windows, from file manager, I think the Linux machine wont be there. – S.I.Tsaklidis Sep 20 '13 at 20:28
@S.I.Tsaklidis You could even give it a static ARP entry so no such traffic would appear. – ott-- Sep 20 '13 at 21:20
Thank you,I will try this too – S.I.Tsaklidis Sep 20 '13 at 22:16
You could probably firewall up to the point where it'll only respond to ARP requests when they come from the router, but yeah -- it'd still broadcast ARP requests. – Shadur Sep 23 '13 at 9:42

Not the answer you're looking for? Browse other questions tagged or ask your own question.