Linux禁止ping命令的消息响应

## 阻止ping服务
echo 1 ＞/proc/sys/net/ipv4/icmp_echo_ignore_all

## IP协议栈安全设置
# 编辑vi /etc/sysctl.conf 修改以下参数。
net.ipv4.tcp_max_syn_backlog = 4096 
net.ipv4.tcp_syncookies=1 
net.ipv4.conf.all.rp_filter = 1 
net.ipv4.conf.all.accept_source_route = 0 
net.ipv4.conf.all.accept_redirects = 0 
net.ipv4.conf.all.secure_redirects = 0 
net.ipv4.conf.default.rp_filter = 1 
net.ipv4.conf.default.accept_source_route = 0 
net.ipv4.conf.default.accept_redirects = 0 
net.ipv4.conf.default.secure_redirects = 0 
net.ipv4.icmp_echo_ignore_broadcasts = 1