1

I have a pfSense v1.2.3 running and want to allow ping from the WAN through to my LAN and allow the response to get through. Web traffic goes through just fine, but not pings. As suggested elsewhere I have a firewall rule like the following:

Action: Pass

Interface: WAN

ICMP Type: Echo

Source: any

Destination: Wan Address

But the pings are still not happening. Networking is not my specialty. Can anyone point me to where I might be going wrong?

3
  • 2
    What are you trying to ping and what are you trying to achieve? That rule makes no sense to me - surely the destination should be whatever you're attempting to ping?
    – Dan
    Dec 23 '11 at 16:23
  • 1
    I'd like to ping a server on the LAN side of the pfSense from any IP on the WAN side of the pfSense. The server answers pings from the LAN side to the LAN side, I'm just having trouble passing that stuff through the pfSense to the internet (WAN). Dec 23 '11 at 17:09
  • If you've got NAT going this isn't really possibly. If you don't have NAT you can just add a rule to allow ICMP from any to any.
    – Chris S
    Dec 29 '11 at 13:53
1

I agree with Dan - by setting the destination as the WAN address you are being selective and only allowing pings to your WAN address with this rule. Change the destination to ANY and it should work as requested.

However by doing this an outsider could potentially deduce what ip addresses you have in use internally, my preference would be to only allow this from trusted addresses.

Off topic - 2.0.1 is out now which adds a lot more functionality.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.