For the sake of safety, general enterprises set the prohibition of ping command on the server , which can effectively avoid ping attacks and scans, and reduce the risk of the server being attacked by such attacks , so how to set the prohibition of Ping on the server? Today, Fangfang will share with you the setting method of banning ping
1. On the computer desktop, use the shortcut key win+ R to pop up the running window, enter secpol.msc in the search box , and click the Enter key to open the local security policy
2. Find the IP security policy in the local security policy, right-click on the local computer , and click Manage IP Filter List and Filter Operations in the pop-up menu
3. In the Manage IP Filter List and Filter Operation window, first select the Manage IP Filter List tab , then click Add at the bottom, and click Add again in the pop-up window
4. Click Next in the pop-up window, fill in the description as you like, fill in here to prohibit pinging the host, click Next again, select my IP address for the source address, and then click Next, select any IP address for the target address, and click Next
5. Select ICMP for the protocol type , then click Next and Finish
6. Click OK in the IP filter list, and then select the management filter operation in the returned management IP filter list and filter operation window
7. Find and click Add under the Manage Filter Action tab, check Block at the top of the New Filter Action Properties window, and then click OK to return
8. For the IP security policy in the local security policy window, right-click on the local computer again, and click Create IP security policy in the pop-up menu
9. Click Next in the pop-up window, fill in the name and description casually, click Next, check Activate Response Rules, click Next and Finish again
10. Click Add at the bottom of the pop-up Prohibition of Ping Properties window just created, check the newly created new IP filter list in the IP filter list, check the newly created new filter operation in the filter operation, and then click OK to return
11. In the IP security policy, find the newly created ban on ping in the right window of the local computer, right-click on it, and click Assign in the pop-up menu.
The setting of the above method is quite complicated. If there is a server file backup system installed, you can also use this system for quick setting
download link:
Link: https://pan.baidu.com/s/158vyv0z8D8Mp6pzQIbS9cQ
Extraction code: FEIa
1. Download Dashizhi Server File Backup System, unzip it after the download is complete, find Dashizhi Server File Backup System-V1.0.msi installation file in the decompressed file, double-click to start the installation, and install according to the prompts until the installation Finish
2. Return to the computer desktop after the installation is complete, find the shortcut of the system, double-click to open it, enter the initial account and password in the pop-up login box according to the prompts, and click OK to log in
3. Find and click Security Configuration on the top of the main interface
4. Find the system security management category at the bottom of the window, and click Prohibit PING this server under it
5. Click OK in the pop-up dialog box, so that the server is set to prohibit Ping
Banning ping can prevent the website from being attacked to a certain extent, so should the server ban ping?
I suggest that it is better to ban ping on the server. Although many large websites do not ban ping, in fact, the nodes of large websites are all over the country, so it is difficult to ban ping. Moreover, the security level of their servers is also very high. Even if a When a node is attacked, other nodes will also take on the heavy responsibility. Ping is not necessary for well-known websites, but our website is often only a server. The consequence after being attacked is that it cannot be opened, and it will affect the User access, so it is recommended that the server ban ping
That's all for today's sharing. I'm IDC02 Fangfang. If you have any legends or server problems, please comment and communicate!