2

Are there any benefits from disabling Ping/ICMP requests on servers?

I've read where people say to do it but I can't seem to find any real benefits with it. Only more likely to cause more problems.

EDIT: All types of ICMP packets.

2
  • 1
    ICMP echo requests are not the only type of ICMP packet. Is your question about just echo requests or all ICMP types?
    – Ladadadada
    Oct 17 '13 at 16:28
  • For all IMCP packets, see this existing question: security.stackexchange.com/q/22711/12
    – Xander
    Oct 17 '13 at 19:38
4

The theory is that it reduces the amount of information available to attackers. A good traceroute can be most informative.

In addition, and in theory, every additional service running on a machine is a possible source of vulnerabilities. The thingumajig that answers ICMP requests is no exception, although they are mostly very old and small thingumajigs whose bugs got shaken out long ago.

As always, there is a decision to be made of security vs convenience. Is the small increase in security worth the inconvenience of breaking standard diagnostic tools?

1

Not the answer you're looking for? Browse other questions tagged or ask your own question.