Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a pfSense v1.2.3 running and want to allow ping from the WAN through to my LAN and allow the response to get through. Web traffic goes through just fine, but not pings. As suggested elsewhere I have a firewall rule like the following:

Action: Pass

Interface: WAN

ICMP Type: Echo

Source: any

Destination: Wan Address

But the pings are still not happening. Networking is not my specialty. Can anyone point me to where I might be going wrong?

share|improve this question
2  
What are you trying to ping and what are you trying to achieve? That rule makes no sense to me - surely the destination should be whatever you're attempting to ping? –  Dan Dec 23 '11 at 16:23
1  
I'd like to ping a server on the LAN side of the pfSense from any IP on the WAN side of the pfSense. The server answers pings from the LAN side to the LAN side, I'm just having trouble passing that stuff through the pfSense to the internet (WAN). –  Paul Hobart Dec 23 '11 at 17:09
    
If you've got NAT going this isn't really possibly. If you don't have NAT you can just add a rule to allow ICMP from any to any. –  Chris S Dec 29 '11 at 13:53

1 Answer 1

I agree with Dan - by setting the destination as the WAN address you are being selective and only allowing pings to your WAN address with this rule. Change the destination to ANY and it should work as requested.

However by doing this an outsider could potentially deduce what ip addresses you have in use internally, my preference would be to only allow this from trusted addresses.

Off topic - 2.0.1 is out now which adds a lot more functionality.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.