DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Restrict ICMP to specific IP's

  • sgibbs
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
11 Jun 2018 18:57 #1 by sgibbs
Restrict ICMP to specific IP's was created by sgibbs
Hi, I currently have "Disable PING from the Internet" unchecked which allows anyone to ping and get a response from my 2860N. I would like, if possible, to restrict this so only certain IP's get a response.
I have tried creating firewall rules that allow ICMP for the IP's that I want to get a response and a generic block to cover everything else. However, this does not seem to work and any IP can ping my router.
Does anyone have any idea of how to configure/restrict this? Is it even possible on a 2860N? I am running the latest 3.8.9 firmware.

Please Log in or Create an account to join the conversation.

More
13 Jun 2018 12:18 #2 by admin
Replied by admin on topic Re: Restrict ICMP to specific IP's

so only certain IP's get a response.



how many public IP addresses do you have ?



Forum Administrator

Please Log in or Create an account to join the conversation.

  • sgibbs
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
13 Jun 2018 13:31 #3 by sgibbs
Replied by sgibbs on topic Re: Restrict ICMP to specific IP's
I have a /29 IP block, so 6 usable IP's. I only need to allow ping on one of them. However, as long as I can restrict who can ping my WAN IP Aliases it wouldn't be an issue if all 6 responded.

Please Log in or Create an account to join the conversation.

  • sgibbs
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
13 Jun 2018 14:20 #4 by sgibbs
Replied by sgibbs on topic Re: Restrict ICMP to specific IP's
Have just had this response from support:

On our DrayOS routers, it's not possible to restrict certain IP's to ping the router. Sorry for the inconvenience.



:-(

Please Log in or Create an account to join the conversation.

More
13 Jun 2018 14:33 #5 by admin
Replied by admin on topic Re: Restrict ICMP to specific IP's
You can probably block certain IPs...but not on the WAN side because the firewall comes after that.



Forum Administrator

Please Log in or Create an account to join the conversation.