Preventing the kernel from responding to ICMP Echo Requests messages can be useful in several ways. The sysctl parameter 'icmp_echo_ignore_all' can be used to prevent the kernel from responding to IPv4 ICMP echo requests. For IPv6 pings, such a sysctl kernel parameter did not exist. Add the ability to prevent the kernel from responding to IPv6 ICMP echo requests through the use of the following sysctl parameter : /proc/sys/net/ipv6/icmp/echo_ignore_all. Update the documentation to reflect this change.
Showing the changes to include/uapi (1 of 5 files). Show all
Unified · Split
| @@ -575,7 +575,8 @@ enum { · 574 unmodified lines | ||
| 575 | 575 | |
| 576 | 576 | /* /proc/sys/net/ipv6/icmp */ |
| 577 | 577 | enum { |
| 578 | − NET_IPV6_ICMP_RATELIMIT=1 | |
| 578 | + NET_IPV6_ICMP_RATELIMIT = 1, | |
| 579 | + NET_IPV6_ICMP_ECHO_IGNORE_ALL = 2 | |
| 579 | 580 | }; |
| 580 | 581 | |
| 581 | 582 | /* /proc/sys/net/<protocol>/neigh/<dev> */ |