Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I created some iptables rules, basically allowing incoming traffic from TCP/UDP Ports 80,53(for the bind server), 22, and blocking everything else incoming however I forgot to allow the ICMP protocol through the filter.

This resulted in expected issues with ping, traceroute, and everything else relying on ICMP. I also noticed a very peculiar thing happening. Our blog spam on the sites hosted almost quadrupled.

What could cause this? I wanted to figure out the issue before turning back on the firewall with ICMP enabled in case there's another explanation.

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

It's a coincidence. Once the spammers found a way into your blog they just sent more traffic (or possibly more spammers found you). Turning ON ICMP could cause an increase (as you'd show up on more default nmap scans which could conceivable be used to locate hosts), but turning it OFF shouldn't.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.