From: "Massimo S." Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTPS id 4754143 for ecs-isp@2rosenthals.com; Thu, 25 Aug 2022 04:06:41 -0400 Received: from [192.168.200.201] (port=37370 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.95) (envelope-from ) id 1oR7sl-0000xN-0M for ecs-isp@2rosenthals.com; Thu, 25 Aug 2022 04:06:32 -0400 Received: from mail2.quasarbbs.net ([80.86.52.115]:10037) by mail2.2rosenthals.com with esmtp (Exim 4.95) (envelope-from ) id 1oR7sc-0001eg-36 for ecs-isp@2rosenthals.com; Thu, 25 Aug 2022 04:06:23 -0400 X-SASI-Hits: BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_8BIT 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, REPLYTO_SAMEAS_FROM 0.000000, SENDER_NO_AUTH 0.000000, SINGLE_URI_IN_BODY 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_MONEY_BIG_COIN 0.000000, __FRAUD_MONEY_BIG_COIN_DIG 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __NO_HTML_TAG_RAW 0.000000, __PHISH_PHRASE1_A 0.000000, __REFERENCES 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __SANE_MSGID 0.000000, __SINGLE_URI_TEXT 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_PATH 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 9% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 4.1.4, AntispamData: 2022.8.25.73018 X-SASI-Hits: BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_8BIT 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, REPLYTO_SAMEAS_FROM 0.000000, SINGLE_URI_IN_BODY 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __AUTH_RES_PASS 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_MONEY_BIG_COIN 0.000000, __FRAUD_MONEY_BIG_COIN_DIG 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_ADDR 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_REPLYTO 0.000000, __HEADER_ORDER_FROM 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __NO_HTML_TAG_RAW 0.000000, __PHISH_PHRASE1_A 0.000000, __REFERENCES 0.000000, __REPLYTO_SAMEAS_FROM_ACC 0.000000, __REPLYTO_SAMEAS_FROM_ADDY 0.000000, __REPLYTO_SAMEAS_FROM_DOMAIN 0.000000, __SANE_MSGID 0.000000, __SINGLE_URI_TEXT 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_PATH 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __USER_AGENT 0.000000 X-SASI-Probability: 9% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 4.1.4, AntispamData: 2022.8.25.73018 Received: from [192.168.10.199] (dtp [192.168.10.199]) by srv2 (Weasel v2.79) for ; 25 Aug 2022 10:06:19 Reply-To: ml@ecomstation.it Subject: Re: [eCS-ISP] IJ FW 4.2.2 ICMP not working To: eCS ISP Mailing List References: Organization: eComStation dot it Message-ID: Date: Thu, 25 Aug 2022 10:06:16 +0200 User-Agent: Mozilla/5.0 (OS/2; U; Warp 4.5; it-IT; rv:1.7.13) Gecko/20060424 Thunderbird/1.0.8 Mnenhy/0.7.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=iso-8859-15; format=flowed Content-Language: it-IT Content-Transfer-Encoding: 8bit hi, #Inetcfg: CURRENT DEFAULT MINIMUM MAXIMUM keepalive 60 7800 0 7800 KeepAlive (sec) tcpswinsize 246723 32768 1024 246723 TCP SendWindow Size tcprwinsize 246723 32768 1024 246723 TCP RecvWindow Size udpswinsize 246723 9216 1024 246723 UDP SendWindow Size udprwinsize 246723 41600 1024 246723 UDP RecvWindow Size lingertime 60 120 0 65535 Linger Time (sec) probecnt 8 8 1 8 Number Of KeepAlive Probes ipforward 1 0 0 1 IP Forwarding flag ON/OFF mtudiscover 1 1 0 1 TCP Path MTU Discovery ON/OFF arpkillc 1200 1200 180 15300 ARP Complete TimeOut (sec) arpkilli 180 180 60 1200 ARP InComplete TimeOut (sec) lipcstswinsize 10240 10240 1024 246723 LIPC Stream SendWindow Size lipcstrwinsize 10240 10240 1024 246723 LIPC Stream RecvWindow Size lipcdgswinsize 2048 2048 1024 246723 LIPC Dgram SendWindow Size lipcdgrwinsize 4096 4096 1024 246723 LIPC Dgram RecvWindow Size synattack 0 0 0 1 SYN Attack Flag ON/OFF syncookie 0 0 0 1 SYN Cookie Flag ON/OFF firewall 0 0 0 1 FIREWALL ON/OFF multidefrt 0 1 0 1 Multiple Default Routes ON/OFF winscale 1 1 0 1 TCP Window Scale ON/OFF timestmp 1 0 0 1 TCP TimeStamps ON/OFF realslow 20 20 1 100 TCP TW Q Slow Timeout ticks perfhttp 1 1 0 1 Fast Path HTTP ON/OFF tcpttl 64 64 1 255 TCP TTL (hops) udpttl 64 64 1 255 UDP TTL (hops) icmpttl 64 64 1 255 ICMP TTL (hops) fragttl 60 60 1 255 Fragment TTL (sec) reusetw 0 1 0 1 Reuse Time Wait ON/OFF msl 30 30 1 16384 TCP MaxSegLifeTime (sec) cc 0 0 0 1 TTCP function ON/OFF sack 0 0 0 1 Selective ACK ON/OFF thanks massimo Il 23/08/2022 18:55, Roderick Klein ha scritto: > On 23-08-22 17:33, Massimo S. wrote: >> Hi all, >> >> i've a setup of Injoy FW 4.2.2 (it also use IPSEC tunnel VPNs) that >> refuse to ping outside servers. >> >> I've already checked security level and it's at level 4 where all ICMP >> types are allowed >> i also checked custom and all ICMP is allowed. >> >> IP forwarding and MTU discovery on the FW server (ecs 2.2b) are active. >> This is the only installation that give me this issue. > > Attach your inetcfg.ini. Has no confidential information in it. > > > Roderick > > > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > This message is sent to you because you are subscribed to >  the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > To switch to the INDEX mode, E-mail to > Send administrative queries to  > To subscribe (new addresses), E-mail to: and reply to the confirmation email. > Web archives are publicly available at: http://lists.2rosenthals.com > > This list is hosted by Rosenthal & Rosenthal, LLC > P.O. Box 281, Deer Park, NY 11729-0281. Non- > electronic communications related to content > contained in these messages should be directed > to the above address. (CAN-SPAM Act of 2003) > > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= >