Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Is ICMP enabled vps very important?
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Is ICMP enabled vps very important?

I have a vps the icmp is disabled . pinging is not enabled can you please explain why I need it to be enabled ? Is it for monitoring purpose?

Comments

  • FAT32FAT32 Administrator, Deal Compiler Extraordinaire
  • It seems many companies in Korea disable ICMP

    Even big korean search engine www.naver.com I can't ping to it :)

  • ehabehab Member
    edited August 2019

    Oldmanpining - ging all day

    Thanked by 2ITLabs Oldmanasking
  • @ehab said:

    Oldmanpining - ging all day

    :) Oldman pinging ha ha ha

  • ehabehab Member

    :) i would leave it on, and rate limit it.

  • hzrhzr Member
    edited August 2019

    Oldmanasking said: Even big korean search engine www.naver.com I can't ping to it :)

    ➜  ~ ping www.naver.com
    PING e6030.a.akamaiedge.net (184.51.48.236) 56(84) bytes of data.
    64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=1 ttl=52 time=80.9 ms
    64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=2 ttl=52 time=75.3 ms
    64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=3 ttl=52 time=74.6 ms
    64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=4 ttl=52 time=73.5 ms
    
    
    Pinging www.cj1.kr [210.122.97.163] with 32 bytes of data:
    Reply from 210.122.97.163: bytes=32 time=444ms TTL=235
    Reply from 210.122.97.163: bytes=32 time=441ms TTL=235
    
    
    
    Pinging heroesofthestorm.kr [137.221.106.104] with 32 bytes of data:
    Reply from 137.221.106.104: bytes=32 time=170ms TTL=49
    Reply from 137.221.106.104: bytes=32 time=180ms TTL=49
    Reply from 137.221.106.104: bytes=32 time=189ms TTL=49
    
    
    
    Pinging ns1.lgplus.com [91.195.240.126] with 32 bytes of data:
    Reply from 91.195.240.126: bytes=32 time=541ms TTL=43
    Reply from 91.195.240.126: bytes=32 time=559ms TTL=43
    
    
    Pinging iwinv.kr [115.68.233.6] with 32 bytes of data:
    Reply from 115.68.233.6: bytes=32 time=611ms TTL=46
    Reply from 115.68.233.6: bytes=32 time=650ms TTL=46
    Reply from 115.68.233.6: bytes=32 time=681ms TTL=46
    
    

    I don't think there is really a huge difference in the % of block compared to rest of world

  • @hzr said:

    Oldmanasking said: Even big korean search engine www.naver.com I can't ping to it :)

    > ➜  ~ ping www.naver.com
    > PING e6030.a.akamaiedge.net (184.51.48.236) 56(84) bytes of data.
    > 64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=1 ttl=52 time=80.9 ms
    > 64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=2 ttl=52 time=75.3 ms
    > 64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=3 ttl=52 time=74.6 ms
    > 64 bytes from a184-51-48-236.deploy.static.akamaitechnologies.com (184.51.48.236): icmp_seq=4 ttl=52 time=73.5 ms
    > 
    > 
    > Pinging www.cj1.kr [210.122.97.163] with 32 bytes of data:
    > Reply from 210.122.97.163: bytes=32 time=444ms TTL=235
    > Reply from 210.122.97.163: bytes=32 time=441ms TTL=235
    > 
    > 
    > 
    > Pinging heroesofthestorm.kr [137.221.106.104] with 32 bytes of data:
    > Reply from 137.221.106.104: bytes=32 time=170ms TTL=49
    > Reply from 137.221.106.104: bytes=32 time=180ms TTL=49
    > Reply from 137.221.106.104: bytes=32 time=189ms TTL=49
    > 
    > 
    > 
    > Pinging ns1.lgplus.com [91.195.240.126] with 32 bytes of data:
    > Reply from 91.195.240.126: bytes=32 time=541ms TTL=43
    > Reply from 91.195.240.126: bytes=32 time=559ms TTL=43
    > 
    > 
    > Pinging iwinv.kr [115.68.233.6] with 32 bytes of data:
    > Reply from 115.68.233.6: bytes=32 time=611ms TTL=46
    > Reply from 115.68.233.6: bytes=32 time=650ms TTL=46
    > Reply from 115.68.233.6: bytes=32 time=681ms TTL=46
    > 
    > 

    I don't think there is really a huge difference in the % of block compared to rest of world

    It seems like naver is utilizing a different network (Akamai) for outside of Korea. Most South Korean companies do block ICMP for some reasons.


    (Kakao and Daum are same companies (merged) so they should might have same server configuration though)

  • hzrhzr Member

    I mean.. Azure cloud drops ICMP to all their VMs by default, I think AWS ELBs do too, etc

  • Disabling ICMP is extremely important. It is possible to do something called RCE (remote code execution) via pinging a server.

  • LeviLevi Member

    @timothy_vyder said:
    Disabling ICMP is extremely important. It is possible to do something called RCE (remote code execution) via pinging a server.

    Ou, tell us more about this.

  • @LTniger said:

    @timothy_vyder said:
    Disabling ICMP is extremely important. It is possible to do something called RCE (remote code execution) via pinging a server.

    Ou, tell us more about this.

    I am sorry, but I am not allowed to talk about specifics. It was discovered by the Russian FSB and is an exploit used by many state actors.

Sign In or Register to comment.