Web Hosting Talk







View Full Version : Destination host unreachable


xJadex
06-04-2004, 04:14 PM
Hi everyone

+ i just wonder how do we make " Destination host unreachable" for everytime we ping the host or server
Ex:

f:\users>ping myserver.com

Pinging myserver.com [151.151.12.201] with 32 bytes of data:

Reply from 198.74.16.154: Destination host unreachable.
Reply from 198.74.16.154: Destination host unreachable.
Reply from 198.74.16.154: Destination host unreachable.
Reply from 198.74.16.154: Destination host unreachable.

Ping statistics for 151.151.12.201:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms


+ And how do we make "Request timeed out" for everytime we ping that server.With this one i think that we need to use firewall router right?,because i used to host my server on cable ,i figured out that if i enable firewall then everytime if someone ping my server it will said "Request Timed out".But how do we do it on dadicate server?Is that good for prevent flood attack?or security reason?Thanks in advance

bidhata
06-04-2004, 04:23 PM
It is just blocking ICMP packet. Not a very good protection indeed. Nowadays common ping gone old. Fragmented ping flood attack differs, with iptables and any other firewall you can do it easily.

xJadex
06-04-2004, 04:29 PM
i got ADF installed ,but not sure if it's secure enought!?.And what firewall would you recommend for server?

bidhata
06-04-2004, 04:32 PM
It is totally depend on the configuration really. If ur configuration is perfect, u can trust on it. 80% of intrusion is cased by misconfiguration the softwares only.

xJadex
06-04-2004, 04:58 PM
what software are you talking about?

bidhata
06-04-2004, 05:28 PM
Any software !!!

Mdot
06-04-2004, 06:05 PM
bidhata is correct - by installing more and more software you just open yourself wider. I never understood people who wanted "this and that" without knowing why they need it.
Even intrusion systems themselves have holes (recent example - tripwire).

So my suggestion - don't install APF or any other software unless you know what it does. Firewall should be built on purpose - just having APF (or any other 3rd party scripts) won't make any good to you.

regards,
M.