Results 1 to 3 of 3
  1. #1
    Master Untangler
    Join Date
    Nov 2009
    Posts
    106

    Exclamation Ping Enable/Disable

    Could we pls have ping enabled/disabled per interface rather than the present global enable disable?

    Reason: I do not want pings answered on the WAN side, but do want them on the LAN side. It seems that some new electronic devices (TVs, Media boxes, etc.) like to ping the gateway during the network setup process. As it stands now, I have to allow pings on the WAN to allow them on the LAN, which I definitely to not want to do.

    Thank you!

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    25,095

    Default

    You can create the rules yourself, in the packet filter. Just turn off the global rule, and create your own.

    Stopping ICMP sourced from external is easy...

    source interface: external
    protocol: icmp
    Craisy Daisy likes this.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Master Untangler
    Join Date
    Nov 2009
    Posts
    106

    Thumbs up

    Duh. Should have thought of that, but didn't. Thank you!

    For anyone else reading this who wants to know exactly what's necessary:

    System Packet Filter Rules:
    uncheck "Allow ping on all interfaces"

    Create Rule:
    "ICMP Internal"
    Action "Pass"
    Protocol "ICMP"
    Source Interface "Internal"

    Create Rule:
    "ICMP External"
    Action "Drop"
    Protocol "ICMP"
    Source Interface "External"

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2