On Wed, 30 Mar 2005 11:16:41 +0500, sai <sonicsai at gmail dot com> wrote:
> On Tue, 29 Mar 2005 17:39:44 -0500, Chris Buechler <cbuechler at gmail dot com> wrote:
> > On Tue, 29 Mar 2005 13:16:25 +0500, ss <sonicsai at gmail dot com> wrote:
> > > I need to allow pinging of servers in the DMZ from outside the WAN.
> > >
> > > i.e.   web server ---- (DMZ interface) m0n0 ( WAN interface) ------
> > > {internet} ---- some PC
> > >
> > >
> >
> > What kind of setup are you using?  1:1 NAT, Server NAT, bridged DMZ,
> > public routed IP's?
> 
> Server NAT
> 

Since Server NAT doesn't support ICMP redirection, only TCP or UDP,
this isn't possible.  With 1:1 NAT you can permit ICMP echo replies
via firewall rules on the WAN interface.

-Chris