Contents
Why is it important to block ping requests at your network firewall?
Many network administrators feel that ICMP is a security risk, and should therefore always be blocked at the firewall. It is true that ICMP does have some security issues associated with it, and that a lot of ICMP should be blocked. But this is no reason to block all ICMP traffic!
Do routers respond to ping?
Ping is a standard (and very useful) internet troubleshooting tool, used to indicate that a device is powered and connected. When a ICMP packet is received, the device sends an ICMP reply – similar to a sonar ‘ping’ bouncing off a submarine. If you tick this box, the router will NOT respond to pings from the internet.
Is it safe to Ping a host on the Internet?
In “Requirement for internet hosts”, a respected authority responsible for the standarization of the ICMP, TCP, IP and other protocols, the IETF, specifies that hosts should respond to ICMP Queries. So not only is the practice safe, but it’s considered mandatory for compliancy with their standards:
How does disabling Ping affect the security of the network?
Disabling ping does not meaningfully increase security; it only makes troubleshooting and network monitoring much more difficult. If turning off ping increases network security, it only slightly slows down the most basic and unskilled cyber hacker. All other services such as HTTP (S), FTP, SMB, etc. are still running and likely discoverable.
Is there a way to allow or block Ping?
However the Public Place network zone blocks ping requests. If you’ve selected Public Place and want to enable ping requests, you can manually configure the global rules to allow ping instead of block. Right click on the Comodo Firewall tray icon located at the notification area and select Advanced View.
Why is honored PING request not relevant to publicly visible servers?
Honored Ping request can yield information about the internal structure of a network. This is not relevant to publicly visible servers, though, since those are already publicly visible. There used to be security holes in some widespread TCP/IP implementations, where a malformed Ping request could crash a machine (the “ping of death” ).