locked
Information required.. RRS feed

  • Question

  • Dear All,

    I am a local DSL / internet provider in my area, having 35 to 40 users and facing problems that some of my users use to ping my server with "-t" all the time during their workings which cause my server to slow down.. i need to know how can i block the ping so that my server would not be able to reply their ping.

    (Using windows server 2k3 with ISA)

    Regards

    Arslan

     

     

    Saturday, August 28, 2010 11:33 PM

Answers

  • Hi,

    You can block ICMP (ping) with any firewall application.

    However, even if all 40 users pinged your server constantly it should not have any effect on performance. In order for ping to have this kind of effect you would need to send a very large ping storm of thousands per second. A client only sends a ping every second, so 40 pings per second is nothing to worry about.

    • Marked as answer by Arslan22 Monday, August 30, 2010 7:10 AM
    Monday, August 30, 2010 3:09 AM
  • Hi Arslan22

     

    Thanks for post here.

     

    To disallow incoming ICMP messages on windows  server 2003 ,please reference the article below:

     

    Block and Unblock ICMP Messages

    http://technet.microsoft.com/en-us/library/cc786463(WS.10).aspx

     

    By default on ISA,  all incoming traffic will be denies, please check all the rules and make sure no ICMP allowed through.

     

    To find out the root cause of this issue, I suggest to capture and monitor the traffic y using some utility ,like network monitor , netmon and the build in performance monitor .

     

    Monitoring Network Performance

    http://technet.microsoft.com/en-us/library/cc938656.aspx

     

    Performance Monitor Counters

    http://technet.microsoft.com/en-us/library/cc768048.aspx

     

    Download details: Microsoft Network Monitor 3.4

    http://www.microsoft.com/downloads/details.aspx?FamilyID=983b941d-06cb-4658-b7f6-3088333d062f

     

    Hope that’s helpful.

     

    Tiger Li


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Arslan22 Monday, August 30, 2010 7:18 AM
    Monday, August 30, 2010 6:53 AM

All replies

  • Hi,

    You can block ICMP (ping) with any firewall application.

    However, even if all 40 users pinged your server constantly it should not have any effect on performance. In order for ping to have this kind of effect you would need to send a very large ping storm of thousands per second. A client only sends a ping every second, so 40 pings per second is nothing to worry about.

    • Marked as answer by Arslan22 Monday, August 30, 2010 7:10 AM
    Monday, August 30, 2010 3:09 AM
  • Hi Arslan22

     

    Thanks for post here.

     

    To disallow incoming ICMP messages on windows  server 2003 ,please reference the article below:

     

    Block and Unblock ICMP Messages

    http://technet.microsoft.com/en-us/library/cc786463(WS.10).aspx

     

    By default on ISA,  all incoming traffic will be denies, please check all the rules and make sure no ICMP allowed through.

     

    To find out the root cause of this issue, I suggest to capture and monitor the traffic y using some utility ,like network monitor , netmon and the build in performance monitor .

     

    Monitoring Network Performance

    http://technet.microsoft.com/en-us/library/cc938656.aspx

     

    Performance Monitor Counters

    http://technet.microsoft.com/en-us/library/cc768048.aspx

     

    Download details: Microsoft Network Monitor 3.4

    http://www.microsoft.com/downloads/details.aspx?FamilyID=983b941d-06cb-4658-b7f6-3088333d062f

     

    Hope that’s helpful.

     

    Tiger Li


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Arslan22 Monday, August 30, 2010 7:18 AM
    Monday, August 30, 2010 6:53 AM
  • Hi,

    Thanks, I think you are right, the server should not be affected with the ping.

    Monday, August 30, 2010 7:15 AM
  • Thanks for the detailed reply, i believe the problem will be resolved by capturing and analyzing the traffic.
    Monday, August 30, 2010 7:20 AM