Why can't I ping my DDOS Protected subnets? (ICMP)

Usually a ping is used to check if a machine is up and to check the network status. It is a small network packet sent to the machine. If the machine is up, an answer will be sent. The time needed to get the answer is called ping time or round-trip time. The ping response from an IP indicates the machine is up or is slow. Unfortunately this can be used to quickly scan an IP-range for reachable hosts, and it is often used for attackers to see if during the attack, the latency will go up. Therefore if your machine doesn't answer to pings, the chance to be attacked is a bit reduced, and you are not helping the attacker by providing him easy information during his attack. Therefore all ICMP traffic will be blocked to all ddos protected ip's.

  • 5 Пользователи нашли это полезным
Помог ли вам данный ответ?

Связанные статьи

Auto null settings are not working anymore. Why?

After you add a ip (subnet) to the DDoS filter, your auto null settings does nto work anymore....

DDoS filter general FAQ's

Where are your filtering node located? The  filtering nodes are located in 2 locations in the...

Does my GRE tunnel allow me to announce my ip subnets to the internet?

Yes. When you using a GRE tunnel to connect your external router to the DDoS cleaning street, it...

Howto: BGP layer 3 configuration for the DDoS filter

The DDoS filter is capable to filter also Layer 3 BGP traffic. And the principle is the same, you...

I have a DDoS on a shared hosting server with a single ip. Can you see on what website it is targeted to?

Yes. If you have a ddos on a shared hosting website url what is hosted on a server what is using...