Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Advertise on LowEndTalk.com
Is ICMP enabled vps very important?
New on LowEndTalk? Please read our 'Community Rules' by clicking on it in the right menu!

Is ICMP enabled vps very important?

I have a vps the icmp is disabled . pinging is not enabled can you please explain why I need it to be enabled ? Is it for monitoring purpose?

I am an old man please bear with me :)

Comments

  • FAT32FAT32 Administrator, Deal Compiler Extraordinaire

    "Everyone you meet is fighting a battle you know nothing about. Be kind. Always."

  • It seems many companies in Korea disable ICMP

    Even big korean search engine www.naver.com I can't ping to it :)

    I am an old man please bear with me :)

  • ehabehab Member
    edited August 2019

    Oldmanpining - ging all day

    Thanked by 2ITLabs Oldmanasking
    • do not prepay > 1 year and check for reviews/support
    • only use monthly from a provider operating < 1 year 🍆
  • @ehab said:

    Oldmanpining - ging all day

    :) Oldman pinging ha ha ha

    I am an old man please bear with me :)

  • ehabehab Member

    :) i would leave it on, and rate limit it.

    • do not prepay > 1 year and check for reviews/support
    • only use monthly from a provider operating < 1 year 🍆
  • hzrhzr Member, Moderator
    edited August 2019

    Oldmanasking said: Even big korean search engine www.naver.com I can't ping to it :)

    ➜  ~ ping www.naver.com
    PING e6030.a.akamaiedge.net (184.51.48.236) 56(84) bytes of data.
    64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=1 ttl=52 time=80.9 ms
    64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=2 ttl=52 time=75.3 ms
    64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=3 ttl=52 time=74.6 ms
    64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=4 ttl=52 time=73.5 ms
    
    
    Pinging www.cj1.kr [210.122.97.163] with 32 bytes of data:
    Reply from 210.122.97.163: bytes=32 time=444ms TTL=235
    Reply from 210.122.97.163: bytes=32 time=441ms TTL=235
    
    
    
    Pinging heroesofthestorm.kr [137.221.106.104] with 32 bytes of data:
    Reply from 137.221.106.104: bytes=32 time=170ms TTL=49
    Reply from 137.221.106.104: bytes=32 time=180ms TTL=49
    Reply from 137.221.106.104: bytes=32 time=189ms TTL=49
    
    
    
    Pinging ns1.lgplus.com [91.195.240.126] with 32 bytes of data:
    Reply from 91.195.240.126: bytes=32 time=541ms TTL=43
    Reply from 91.195.240.126: bytes=32 time=559ms TTL=43
    
    
    Pinging iwinv.kr [115.68.233.6] with 32 bytes of data:
    Reply from 115.68.233.6: bytes=32 time=611ms TTL=46
    Reply from 115.68.233.6: bytes=32 time=650ms TTL=46
    Reply from 115.68.233.6: bytes=32 time=681ms TTL=46
    
    

    I don't think there is really a huge difference in the % of block compared to rest of world

  • @hzr said:

    Oldmanasking said: Even big korean search engine www.naver.com I can't ping to it :)

    > ➜  ~ ping www.naver.com
    > PING e6030.a.akamaiedge.net (184.51.48.236) 56(84) bytes of data.
    > 64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=1 ttl=52 time=80.9 ms
    > 64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=2 ttl=52 time=75.3 ms
    > 64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=3 ttl=52 time=74.6 ms
    > 64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=4 ttl=52 time=73.5 ms
    > 
    > 
    > Pinging www.cj1.kr [210.122.97.163] with 32 bytes of data:
    > Reply from 210.122.97.163: bytes=32 time=444ms TTL=235
    > Reply from 210.122.97.163: bytes=32 time=441ms TTL=235
    > 
    > 
    > 
    > Pinging heroesofthestorm.kr [137.221.106.104] with 32 bytes of data:
    > Reply from 137.221.106.104: bytes=32 time=170ms TTL=49
    > Reply from 137.221.106.104: bytes=32 time=180ms TTL=49
    > Reply from 137.221.106.104: bytes=32 time=189ms TTL=49
    > 
    > 
    > 
    > Pinging ns1.lgplus.com [91.195.240.126] with 32 bytes of data:
    > Reply from 91.195.240.126: bytes=32 time=541ms TTL=43
    > Reply from 91.195.240.126: bytes=32 time=559ms TTL=43
    > 
    > 
    > Pinging iwinv.kr [115.68.233.6] with 32 bytes of data:
    > Reply from 115.68.233.6: bytes=32 time=611ms TTL=46
    > Reply from 115.68.233.6: bytes=32 time=650ms TTL=46
    > Reply from 115.68.233.6: bytes=32 time=681ms TTL=46
    > 
    > 

    I don't think there is really a huge difference in the % of block compared to rest of world

    It seems like naver is utilizing a different network (Akamai) for outside of Korea. Most South Korean companies do block ICMP for some reasons.


    (Kakao and Daum are same companies (merged) so they should might have same server configuration though)

  • hzrhzr Member, Moderator

    I mean.. Azure cloud drops ICMP to all their VMs by default, I think AWS ELBs do too, etc

  • Disabling ICMP is extremely important. It is possible to do something called RCE (remote code execution) via pinging a server.

    [removed]

  • @timothy_vyder said:
    Disabling ICMP is extremely important. It is possible to do something called RCE (remote code execution) via pinging a server.

    Ou, tell us more about this.

    hostwp.net -- Wordpress Hosting for Developers.

  • @LTniger said:

    @timothy_vyder said:
    Disabling ICMP is extremely important. It is possible to do something called RCE (remote code execution) via pinging a server.

    Ou, tell us more about this.

    I am sorry, but I am not allowed to talk about specifics. It was discovered by the Russian FSB and is an exploit used by many state actors.

    [removed]

Sign In or Register to comment.