Preventing the kernel from responding to ICMP Echo Requests messages can be useful in several ways. The sysctl parameter 'icmp_echo_ignore_all' can be used to prevent the kernel from responding to IPv4 ICMP echo requests. For IPv6 pings, such a sysctl kernel parameter did not exist. Add the ability to prevent the kernel from responding to IPv6 ICMP echo requests through the use of the following sysctl parameter : /proc/sys/net/ipv6/icmp/echo_ignore_all. Update the documentation to reflect this change.
Showing the changes to include/uapi/linux (1 of 5 files). Show all
Unified · Split
| @@ -575,7 +575,8 @@ enum { · 574 unmodified lines | |||
| 575 | 575 | ||
| 576 | /* /proc/sys/net/ipv6/icmp */ | 576 | /* /proc/sys/net/ipv6/icmp */ |
| 577 | enum { | 577 | enum { |
| 578 | NET_IPV6_ICMP_RATELIMIT=1 | 578 | NET_IPV6_ICMP_RATELIMIT = 1, |
| 579 | NET_IPV6_ICMP_ECHO_IGNORE_ALL = 2 | ||
| 579 | }; | 580 | }; |
| 580 | 581 | ||
| 581 | /* /proc/sys/net/<protocol>/neigh/<dev> */ | 582 | /* /proc/sys/net/<protocol>/neigh/<dev> */ |