Maoz wrote:
on iptables iptables -A INPUT -p icmp -j DROP
Which is just a HORRID idea. If you want to block ping, block ping requests...
iptables -A INPUT -p icmp --icmp-type 8 -j DROP...but for the LOVE OF THE INTERNET don't block destination-unreachable, source quench or time-exceeded messages. (icmp-type 3, 4 and 12 respectively). For your own troubleshooting, allow echo replies (icmp-type 0) as well.
Chris
