DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Disable Ping

  • tim.clixby@heatons.net
  • Topic Author
  • User
  • User
More
15 May 2017 14:42 #1 by tim.clixby@heatons.net
Disable Ping was created by tim.clixby@heatons.net
Afternoon all,

I'm looking for some advice.

I want to disable ping from the internet for security reasons.

We host a website in house.
I have all the correct ports open and my site works.

As soon as I 'disable ping from the internet' my site goes down.
Is it correct that these 2 options are linked? :o

Thanks

Tim

Please Log in or Create an account to join the conversation.

  • gilbad
  • User
  • User
More
15 May 2017 14:55 #2 by gilbad
Replied by gilbad on topic Re: Disable Ping
Hi Tim,

I've not experienced this, would understand if it was blocking all ICMP - but not just pings.

Take it you're not relying on a dynamic dns host thats pinging you to 'confirm life'?

Cheers
Adam

Please Log in or Create an account to join the conversation.

  • tim.clixby@heatons.net
  • Topic Author
  • User
  • User
More
15 May 2017 14:58 #3 by tim.clixby@heatons.net
Replied by tim.clixby@heatons.net on topic Re: Disable Ping
Hi Adam,

Thanks for the quick reply.

We use a company called Hyperspin to monitor our websites / routers.
Everything is perfect until I disable pings from the internet - at which point the site goes down - and then we get our alerts through to say the site is down.

We cant browse to our site externally with disable ping from the internet ticked.

I'm disabling pings as a security measure.

Please Log in or Create an account to join the conversation.

  • gilbad
  • User
  • User
More
15 May 2017 15:23 #4 by gilbad
Replied by gilbad on topic Re: Disable Ping
Just tried a quick/crude experiment here on a 2925 (external modem)

System Management -> Management -> Changed management HTTP port from 80 to 88
System Management -> Management -> Disable PING from internet
NAT -> Open Ports -> 80 (TCP/UDP) to 10.16.x.x

External pings failed as expected
Could access webpage by public IP address & domain name

Cheers Adam

Please Log in or Create an account to join the conversation.

  • adrianh54
  • User
  • User
More
16 May 2017 18:34 #5 by adrianh54
Replied by adrianh54 on topic Re: Disable Ping
ICMP Echo (Ping) is probably required by the monitoring company , and turning off ping will do absolutely nothing whatever to improve security .

If you run on IPv6 ping is a requirement so it is best left alone.

Please Log in or Create an account to join the conversation.

  • tim.clixby@heatons.net
  • Topic Author
  • User
  • User
More
16 May 2017 21:52 #6 by tim.clixby@heatons.net
Replied by tim.clixby@heatons.net on topic Re: Disable Ping
Sorry for not replying sooner.

'Disabling ping' seems to stop any port forwarding at all.
I've just upgraded the firmware to 3.8.44 but have the same issue.

Ping enabled - our website works.
Disable ping - website goes down.
Enable Ping - Website back online.

Please Log in or Create an account to join the conversation.