Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a pfSense v1.2.3 running and want to allow ping from the WAN through to my LAN and allow the response to get through. Web traffic goes through just fine, but not pings. As suggested elsewhere I have a firewall rule like the following:

Action: Pass

Interface: WAN

ICMP Type: Echo

Source: any

Destination: Wan Address

But the pings are still not happening. Networking is not my specialty. Can anyone point me to where I might be going wrong?

share|improve this question
What are you trying to ping and what are you trying to achieve? That rule makes no sense to me - surely the destination should be whatever you're attempting to ping? – Dan Dec 23 '11 at 16:23
I'd like to ping a server on the LAN side of the pfSense from any IP on the WAN side of the pfSense. The server answers pings from the LAN side to the LAN side, I'm just having trouble passing that stuff through the pfSense to the internet (WAN). – Paul Hobart Dec 23 '11 at 17:09
If you've got NAT going this isn't really possibly. If you don't have NAT you can just add a rule to allow ICMP from any to any. – Chris S Dec 29 '11 at 13:53

I agree with Dan - by setting the destination as the WAN address you are being selective and only allowing pings to your WAN address with this rule. Change the destination to ANY and it should work as requested.

However by doing this an outsider could potentially deduce what ip addresses you have in use internally, my preference would be to only allow this from trusted addresses.

Off topic - 2.0.1 is out now which adds a lot more functionality.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.