Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I created some iptables rules, basically allowing incoming traffic from TCP/UDP Ports 80,53(for the bind server), 22, and blocking everything else incoming however I forgot to allow the ICMP protocol through the filter.

This resulted in expected issues with ping, traceroute, and everything else relying on ICMP. I also noticed a very peculiar thing happening. Our blog spam on the sites hosted almost quadrupled.

What could cause this? I wanted to figure out the issue before turning back on the firewall with ICMP enabled in case there's another explanation.

share|improve this question
up vote 0 down vote accepted

It's a coincidence. Once the spammers found a way into your blog they just sent more traffic (or possibly more spammers found you). Turning ON ICMP could cause an increase (as you'd show up on more default nmap scans which could conceivable be used to locate hosts), but turning it OFF shouldn't.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.