Linux – How to Disable Ping Response (ICMP Echo) Permanently

icmpping

I want to disable ping response all the time on my Ubuntu operating system, the following commands work but only until the system reboots:

Ping off:

echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all

Ping on: 

echo "0" > /proc/sys/net/ipv4/icmp_echo_ignore_all

How would I be able to leave echo off even after having rebooted my laptop?

Best Answer

How would I be able to leave echo off even when I am rebooting my laptop?

You can use one of the following three ways (as root):

Edit /etc/sysctl.conf

Add the following line to your /etc/sysctl.conf:

net.ipv4.icmp_echo_ignore_all=1

Then:

sysctl -p

Using iptables:

iptables -I INPUT -p icmp --icmp-type echo-request -j DROP

With cron

Run crontab -e as root, then add the following line:

@reboot echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all

Start and enable the service:

systemctl start cron.service
systemctl enable cron.service
Related Question