2

This question already has an answer here:

Are there any benefits from disabling Ping/ICMP requests on servers?

I've read where people say to do it but I can't seem to find any real benefits with it. Only more likely to cause more problems.

EDIT: All types of ICMP packets.

marked as duplicate by Xander, Thomas Pornin, GdD, user10211, Adi Oct 17 '13 at 16:36

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    ICMP echo requests are not the only type of ICMP packet. Is your question about just echo requests or all ICMP types? – Ladadadada Oct 17 '13 at 16:28
  • For all IMCP packets, see this existing question: security.stackexchange.com/q/22711/12 – Xander Oct 17 '13 at 19:38
5

The theory is that it reduces the amount of information available to attackers. A good traceroute can be most informative.

In addition, and in theory, every additional service running on a machine is a possible source of vulnerabilities. The thingumajig that answers ICMP requests is no exception, although they are mostly very old and small thingumajigs whose bugs got shaken out long ago.

As always, there is a decision to be made of security vs convenience. Is the small increase in security worth the inconvenience of breaking standard diagnostic tools?

Not the answer you're looking for? Browse other questions tagged or ask your own question.