By Luis Freitas
You may want to keep the ability to reply to pings, but protect yourself from a form of attack known as a ‘ping flood’. So how can you manage such a feat? The easiest way is to slow down the rate at which the server replies to pings. They are still valid, but won’t overload the server:
sysctl -w net.ipv4.icmp_echoreply_rate=10
This slows the rate at which replies are sent to a single address.