I've researched this and found the following on StackExchange and ServerFault, but they're very old.


Is it a bad idea for a firewall to block ICMP?

Security risk of PING?

So, as of now (mid-2020) is there any valid security reason to block outbound ping on one's server.

  • 1
    Instead of duplicating existing questions, we should bring attention to those questions to make sure they are still accurate,
    – schroeder
    Jun 1 '20 at 15:17
  • Most infosec questions can be answered with "It depends" and this is definitely one of them. Some environments will block icmp while others will allow it or at least allow certain types. What service(s) need to send icmp? Why? To what destination? What icmp types? So on and so forth.
    – phbits
    Jun 1 '20 at 15:53
  • @schroeder Closing this by directing me to an answer which was one of the posts I mentioned that didn't answer it isn't appropriate. I said that the answers I found are very old - in the case of the suggestion you made that's over 7-years old. In security and internet terms, those are in dog year. So my question stands and should be re-opened: Today in mid 2020 are there any actual security reasons for blocking outbound ping, or for that matter ICMP altogether? Surely techniques that exploit pinging have long been mitigate?
    – SKidd
    Jun 2 '20 at 13:26
  • I have explained. It is not appropriate to repost the same question. It is appropriate to update the old question.
    – schroeder
    Jun 2 '20 at 14:20

Browse other questions tagged or ask your own question.