Ask Me Help Desk

Ask Me Help Desk (https://www.askmehelpdesk.com/forum.php)
-   Networking (https://www.askmehelpdesk.com/forumdisplay.php?f=76)
-   -   Ping the subnet (https://www.askmehelpdesk.com/showthread.php?t=548312)

  • Jan 27, 2011, 03:44 AM
    javadataiy
    Ping the subnet
    Hey, I want to know how to block computers in a subnet, that they do not be able to ping other computers on the same subnet,
    Thanks.
  • Jan 28, 2011, 01:51 PM
    ITstudent2006

    So you want a subnet that isolates PC communication from each other?
  • Jan 29, 2011, 06:39 AM
    cajalat
    This can be done with higher-end switches. Home switches generally can't do that. The feature you're looking for is sometimes called "Private VLANs" which in essence prevents all communication within a VLAN between devices but allows access only to the gateway. Any broadcasts within a subnet are also prevented (except to the gateway).
  • Jan 29, 2011, 10:05 PM
    javadataiy
    Comment on ITstudent2006's post
    Thanks for your Answer, Yep That's what I want.
  • Jan 29, 2011, 10:08 PM
    javadataiy
    Comment on cajalat's post
    Thanks cajalat for your answer, It really been very informative,, but I wanted to know can we do that with an OS distribution or IPSec Service?
  • Jan 29, 2011, 10:49 PM
    cajalat
    You can definitely accomplish what you want with the OS. But you will need to make the changes on every PC in the subnet. Each OS has a different way of doing this but ultimately what you want to do is block any inbound ICMP-Echo Request. This will allow all other ICMP messages to work except for PINGs.

    So each computer that has this block enabled will not respond to someone else trying to ping them. They will be able to ping other systems though (so long as the other system doesn't have this block on it).

    So if you have:

    Machine A: blocks inbound ICMP Echo Request
    Machine B: blocks inbound ICMP Echo Request
    Machine C: No changes

    Then

    Machine A can ping C but not B
    Machine B can ping C but not A
    Machine C can't ping A or B

    Keep in mind that "ping" is just a tool to check if a destination machine is "alive". Blocking Ping alone will not prevent someone from figuring out if your machine is "alive". They can run a traceroute for example to see if it responds.
  • Jan 29, 2011, 11:16 PM
    javadataiy
    Comment on cajalat's post
    Thanks cajalat for your answer & time.

  • All times are GMT -7. The time now is 08:21 PM.