Suggestion for some network parameter defaults

Alan Cox alan at redhat.com
Mon Nov 29 12:15:52 UTC 2004


On Mon, Nov 29, 2004 at 12:51:22PM +0100, Troels Arvin wrote:
> > net.ipv4.icmp_echo_ignore_broadcasts       (current: 0, proposed: 1)
> 
> I actually find it useful that ping broadcasts are allowed, to be able to
> quickly see which hosts are up.

It can get used as a DDoS amplifier however so in general its only safe if 
it is behind a firewall




More information about the devel mailing list