how to prevent from the packages of ping?

[awisc]

i have set the rule of ping(ICMP) to prevent anyothers from pinging my computer.
but i found that this rule is fail.they still can ping me .
how to set the internet filtering rules?

[Climenole]

Hi awisc :)

There is no rule to prevent other computer to ping yours...
You have no control on their computers, right?

The only needed rules for ICMP on Internet are:

a rule to allow your PC to ping:
ICMP type 8 code 0 : echo request
outgoing only

a rule to received the answer of the previous "ping"
ICMP type 0 code 0 : echo reply
incoming only

a rule for the "timeout" used by trace route
ICMP type 11 code 0: time to live expired
incoming only

all the other ICMP type/code must be blocked in and out.

The other PCs may "ping" your PC a million time, the pings are blocked with no answer from you...

This keep your PC "stealth" at the level of the ICMP.

:)

[Frederic]

Maybe you have a router, and your router is answering pings directly without having the PC (and Look 'n' Stop) involved at all.

Frederic

[awisc]

thanks to Climenole and Frederic.