生產服務器:
OS: CentOS release 6.8 (Final)
任務:通過內核參數配置ping
一、臨時生效配置方式:
不允許本地ping
[sky@sky9896 ~]$ ping 117.40.*.*
PING 117.40.*.* (117.40.*.*) 56(84) bytes of data.
[sky@sky9896 ~]$ ping 127.0.0.1
PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
不允許客戶端對本服務器ping
[root@Cacti ~]# ping 117.40.*.*
PING 117.40.*.* (117.40.*.*) 56(84) bytes of data.
操作配置如下:
[sky@sky9896 ~]$ cat /proc/sys/net/ipv4/icmp_echo_ignore_all
1
對1改成0,即可本地ping或客戶端對服務器的ping
[root@sky9896 sky]# echo 0 >/proc/sys/net/ipv4/icmp_echo_ignore_all
[root@sky9896 sky]# cat /proc/sys/net/ipv4/icmp_echo_ignore_all
0
測試效果:
[root@sky9896 sky]# ping 127.0.0.1
PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.057 ms
[root@Cacti ~]# ping 117.40.*.* #客戶端測試ping服務器
PING 117.40.*.* (117.40.*.*) 56(84) bytes of data.
64 bytes from 117.40.*.*: icmp_seq=1 ttl=64 time=0.438 ms
二、永久生效方式:
[root@sky9896 sky]# vi /etc/sysctl.conf
………
net.ipv4.icmp_echo_ignore_all = 0 #允許ping,設1禁止ping
[root@sky9896 sky]# sysctl –p #使新配置生效