Forum Discussion
The_Bhattman
May 18, 2009Nimbostratus
Here is an untested iRule way
when CLIENT_ACCEPTED {
if { [IP::protocol] == 1 } { reject }
}
There is also another way which I have done on Linux only, but it applies to all addresses
As superuser, add the following lines to /etc/sysctl.conf:
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_echo_ignore_all = 1
Then run the following command to cause it take effect immediately
sysctl -p
This change will persist through a reboot. But would need to be reset after an upgrade.
Hope this helps
CB