1、禁止ping
echo 1 >/proc/sys/net/ipv4/icmp_echo_ignore_all

2、允许ping

echo 0 >/proc/sys/net/ipv4/icmp_echo_ignore_all