[ previous ] [ next ] [ threads ]
 From:  Manuel Kasper <mk at neon1 dot net>
 To:  "Sergei Kostigoff" <sergei at kostigoff dot net>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] icmp echo
 Date:  Sat, 3 Jan 2004 13:06:37 +0100
On 03.01.2004, at 12:43, Sergei Kostigoff wrote:

> It is clear that m0n0wall does not allow to be pinged from outside 
> WAN. I
> have looked mail list archive, and it is confirmed there. But what if I
> would like to switch icmp echo on? Shall I hack inside the scripts and
> then re-build the system or there is a way to unblock such echo in web
> interface?

Just add a filter rule like this:

Action: Pass
Interface: WAN
Protocol: ICMP
Source: any
Destination: your m0n0wall WAN IP address (you'll have to use any if 
it's dynamic - ugly, I know)

This will permit all ICMP packets, not just ICMP echo, though.

- Manuel