Mailing List Archived Message #405

From: "Massimo S." <> Full Headers
Undecoded message
Subject: Re: [eCS-ISP] IJ FW 4.2.2 ICMP not working
Date: Thu, 25 Aug 2022 22:14:45 +0200
To: eCS ISP Mailing List <>

Il 25/08/2022 21:28, Steven Levine ha scritto:
In <>, on 08/25/22
    at 08:40 PM, "Roderick Klein" <> said:


On 25-08-22 10:06, Massimo S. wrote:

I got it wrong. Are you certain you did not block ICMP traffic in Injoy
firewall itself ?

FWIW, this depends on the firewall security level and any custom rules
that might be in place.

Massimo, did ICMP ever work on this system or did some ijfw rule change
cause this?

Based on what you say, I have to assume you have added VPN and IPSEC rules
to the standard level 4 ruleset.  I would recommend checking these rules
and the rule order and make sure these new rules are not preventing ICMP.

One way to test this is add add the custom rule

Comment = "Enable ping",
Protocol = ICMP,
Rule-Action = Allow

at the top of your firerule.cnf.  This will prevent the rules that may
follow from blocking ICMP.

We prefer to run at Level 5, even though we don't use ijfw for ipsec or
vpn, so that ports are blocked by default along with ICMP.  We open
specific ports in firerule.cnf and allow ICMP with a variation of the
above rule.


i use vpn at level 4

about the rule i've added right now and it have no effect
ping still not work



Subscribe: Feed, Digest, Index.
Mail to ListMaster