Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I wasn't able to ping to my ec2 server although I've done the following command:

ec2-authorize default -P icmp -t -1:-1 -s 0.0.0.0/0

when I try this again it gives me:

Client.InvalidPermission.Duplicate: The permission '0.0.0.0/0-3--1--1' has already been authorized on the specified group

now when I ping from my laptop it gives me:

PING 54.251.103.225 (54.251.103.225): 56 data bytes
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
Request timeout for icmp_seq 3

any idea on what to try on next?

share|improve this question
add comment

1 Answer

since you pasted a public IP, i had to see...

64 bytes from 54.251.103.225: icmp_req=1 ttl=51 time=192 ms
64 bytes from 54.251.103.225: icmp_req=2 ttl=51 time=191 ms

looks like you may be limiting icmp at your location?

otherwise, if this was fixed after posting, remember that allowing icmp open to the world means that you will be hit by the many evilcrawlers that find a box with icmp, and then mount several hundred/thousand canned attacks it. easier just to be invisible, and allow icmp from a few ips (/32's). the same goes for everything else not needed publicly. opening tcp/22 to the world, and having sshd listen on default, will generate a few hundred thousand entries in your secure or auth log.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.