How can I block ping requests with IPTables?

Question

and stealth specific ports?

Answer 1

To deny responses to ping requests..Add the following iptable rule

iptables -A OUTPUT -p icmp -o eth0 -j ACCEPT          
iptables -A INPUT -p icmp --icmp-type echo-reply -s 0/0 -i eth0 -j ACCEPT     
iptables -A INPUT -p icmp --icmp-type destination-unreachable -s 0/0 -i eth0 -j ACCEPT  
iptables -A INPUT -p icmp --icmp-type time-exceeded -s 0/0 -i eth0 -j ACCEPT       
iptables -A INPUT -p icmp -i eth0 -j DROP       

Answer 2

I believe iptables -I INPUT -p icmp --icmp-type 8 -j DROP should do the trick.

For IPv6 you would need something like ip6tables -I INPUT -p icmpv6 --icmp-type 8 -j DROP.

Answer 3

Drop ICMP echo requests ("Ping"):

iptables -A INPUT -p icmp --icmp-type echo-request -j DROP

What do you mean by stealth? You could just DROP all incoming packets. Google provided this:

iptables -A INPUT -p tcp -m stealth -j REJECT

But on (my) Ubuntu box, iptables does not know of a "stealth" match. As it seems, you can do lots of interesting stuff with xtables:

aptitude show xtables-addons-common