On 16.04.06 18:55 +0200, YvesDM wrote:

> Just experimental, i'm trying to get the GUI through the WAN
> interface. http://doc.m0n0.ch/handbook/faq-webGUI-from-WAN.html

Probably not related to your problem, but that part of the guide
needs updating (dynamic IP address section) - it's no longer
necessary to use "any" in the rule to access the webGUI on WAN if
your WAN IP address is dynamic. Just use "WAN address" as the
destination in your firewall rule, and that's it.

> This is the rule i've added:
> 
> protoc. | source            | port |  destination      | port
> | description
> 
> TCP     | 192.168.2.145 |   *    | 192.168.2.162  | 443 (https) |
> remote

Are you sure you've unchecked "block private networks on WAN" on the
WAN interface setup page?

> Ps Is there a way to NOT block ICMP  echo requests?

Yes. Simply add a rule on WAN to permit ICMP echo from any to "WAN
address".

- Manuel