On 4/16/06, Manuel Kasper <mk at neon1 dot net> wrote:

>
> > Ps Is there a way to NOT block ICMP  echo requests?
>
> Yes. Simply add a rule on WAN to permit ICMP echo from any to "WAN
> address".
>
> - Manuel
>

Tnx, but it still doesn't answer on my ping probes.
(i like to ping my hosts to make sure they're up)

<rule>
<type>pass</type>
<interface>wan</interface>
<protocol>icmp</protocol>
−
    <source>
<any/>
</source>
−
    <destination>
<network>wanip</network>
</destination>
<descr>Reply on pings</descr>
</rule>