Page 1 of 1

Block a port, but without blacklisting remote IP if used ?

Posted: 13 Oct 2014, 15:05
by simon templar
Hi all,

I see that my csf blocks a lot of IP that are just trying to ping my server.
I understand that a lot of people ping before they attack.. but a lot ping just to check the latency.

Is it possible to block ICMP/8 in csf, but NOT block an IP address who is trying to ping ? (Basically, the server will not answer anything, but will not block the IP neither).

Thank you.

Re: Block a port, but without blacklisting remote IP if used

Posted: 13 Oct 2014, 15:09
by simon templar
I think I found it

PS_PORTS=0:65535,ICMP

Can someone confirm that I can remove ICMP from this line and that it will simply block ICMP traffic from my box, but also will not blacklist someone who's trying to ping ?

Thanks