|Mailing List email@example.com Archived Message #405||back to list|
In <firstname.lastname@example.org>, on 08/25/22
at 08:40 PM, "Roderick Klein" <email@example.com> said:
On 25-08-22 10:06, Massimo S. wrote:
#Inetcfg: CURRENT DEFAULT MINIMUM MAXIMUM
I got it wrong. Are you certain you did not block ICMP traffic in Injoy
firewall itself ?
FWIW, this depends on the firewall security level and any custom rules
that might be in place.
Massimo, did ICMP ever work on this system or did some ijfw rule change
Based on what you say, I have to assume you have added VPN and IPSEC rules
to the standard level 4 ruleset. I would recommend checking these rules
and the rule order and make sure these new rules are not preventing ICMP.
One way to test this is add add the custom rule
Comment = "Enable ping",
Protocol = ICMP,
Rule-Action = Allow
at the top of your firerule.cnf. This will prevent the rules that may
follow from blocking ICMP.
We prefer to run at Level 5, even though we don't use ijfw for ipsec or
vpn, so that ports are blocked by default along with ICMP. We open
specific ports in firerule.cnf and allow ICMP with a variation of the
Mail to ListMaster