Results 1 to 5 of 5
  1. #1
    Newbie
    Join Date
    Aug 2013
    Posts
    12

    Default Untangle 11.1 drop ping of WAN?

    Good evening all,

    I have noticed recently that my WAN is responding to pings, I would prefer it not to.

    Could someone point me in the right direction please?

    I searched but it only brought up old, closed threads from like 2010 and 2013 and untangle is now different.

    Tried creating a rule for source interface: external and protocol: icmp but there is no icmp under protocol options.

    Any pointers?

    Many thanks

    Al

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    25,095

    Default

    Config -> networking -> advanced -> filter

    Make a rule that controls ICMP how you wish, just be careful. The filter is advanced for a reason, and you can lock yourself out of your own box in there.

    Incidentally, Untangle doesn't respond to ping on WAN interfaces by default. So someone has already been in the filter tinkering to cause this.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Newbie
    Join Date
    Aug 2013
    Posts
    12

    Default

    Cheers Sky-Night,

    Been in there and found that one myself, "allow ping" although, once in that rule it is all 'greyed out', can't modify any of it.

    Could/should I remove it and re-add it?

    ****edit****

    Disabled the default allow and created my own block, seems to do what I want....

    Is there anywhere I can specify drop instead of block? Or is it the same thing in reality?
    Last edited by bigbadal; 06-21-2015 at 02:36 PM.

  4. #4
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    25,095

    Default

    You can't modify the default system filter rules. You can however, make your own custom rules to do whatever you want. And yes, "allow ICMP" allows it everywhere. If you want to limit it to non-wan interfaces, you need to make a rule that is such.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  5. #5
    Newbie
    Join Date
    Aug 2013
    Posts
    12

    Default

    Fantastic, thanks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2