解决“允许Traceroute探测”和“ICMP timestamp请求响应漏洞”

title: 解决“允许Traceroute探测”和“ICMP timestamp请求响应漏洞” #标题tags: 安全整改 #标签
date: 2020-07-24
categories: 工作大杂烩 # 分类

记录下相关漏洞整改命令。

解决ICMP timestamp请求响应漏洞

iptables -A INPUT -p ICMP --icmp-type timestamp-request -j DROP
iptables -A INPUT -p ICMP --icmp-type timestamp-reply -j DROP
iptables-save

解决允许Traceroute探测

iptables -A INPUT -p ICMP --icmp-type time-exceeded -j DROP
iptables -A OUTPUT -p ICMP --icmp-type time-exceeded -j DROP 
iptables-save