1. Logsign Support Center
  2. Logsign Unified SecOps Platform
  3. Troubleshooting

Blocking ICMP Packet in Logsign

Updated


The most commonly used method in DOS Attack attacks is to send ICMP packets to the target system and make the system unable to respond after a while. You can block ICMP Packets on Logsign Server, and drop attacks before they reach you.

1- First of all connect to Logsign via cli.

2- Be root with sudo command.

# sudo bash

3-Add the following line to the sysctl.conf file.

# net.ipv4.icmp_echo_ignore_all = 1 net.ipv4.icmp_echo_ignore_broadcasts = 1

4- Execute following command and exit.

# sysctl -p

After these processes, Logsign will not accept the ICMP Packages that comes.

Was this article helpful?
0 out of 0 found this helpful

Articles in this section

See more
Become a Certified Logsign User/Administrator
Sign-up for Logsign Academy and take the courses to learn about Logsign USO Platform in detail. Enjoy the courses, and get your badges and certificates. In these courses, you'll learn how to use Logsign in your work and add value to your career.
Visit Our Blog
Our Logsign USO Platform illustrate our expertise. So do the blog. Through our blog posts, deepen your knowledge on various SecOps topics or get updated about important news & modern approaches for cybersecurity. Get into the habit of reading valuable information provided by Logsign. Be a step ahead.