In <list-4755079@2rosenthals.com>, on 08/25/22
at 08:40 PM, "Roderick Klein" <ecs-isp@2rosenthals.com> said:
Hi,
>On 25-08-22 10:06, Massimo S. wrote:
>> #Inetcfg: CURRENT DEFAULT MINIMUM MAXIMUM
>I got it wrong. Are you certain you did not block ICMP traffic in Injoy
>firewall itself ?
FWIW, this depends on the firewall security level and any custom rules
that might be in place.
Massimo, did ICMP ever work on this system or did some ijfw rule change
cause this?
Based on what you say, I have to assume you have added VPN and IPSEC rules
to the standard level 4 ruleset. I would recommend checking these rules
and the rule order and make sure these new rules are not preventing ICMP.
at the top of your firerule.cnf. This will prevent the rules that may
follow from blocking ICMP.
We prefer to run at Level 5, even though we don't use ijfw for ipsec or
vpn, so that ports are blocked by default along with ICMP. We open
specific ports in firerule.cnf and allow ICMP with a variation of the
above rule.
volver a la lista