Why can't I ping my DDOS Protected subnets? (ICMP) Print

Usually a ping is used to check if a machine is up and to check the network status. It is a small network packet sent to the machine. If the machine is up, an answer will be sent. The time needed to get the answer is called ping time or round-trip time. The ping response from an IP indicates the machine is up or is slow. Unfortunately this can be used to quickly scan an IP-range for reachable hosts, and it is often used for attackers to see if during the attack, the latency will go up. Therefore if your machine doesn't answer to pings, the chance to be attacked is a bit reduced, and you are not helping the attacker by providing him easy information during his attack. Therefore all ICMP traffic will be blocked to all ddos protected ip's.