DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Restrict ICMP to specific IP's

  • sgibbs
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
11 Jun 2018 18:57 #92050 by sgibbs
Restrict ICMP to specific IP's was created by sgibbs
Hi, I currently have "Disable PING from the Internet" unchecked which allows anyone to ping and get a response from my 2860N. I would like, if possible, to restrict this so only certain IP's get a response.
I have tried creating firewall rules that allow ICMP for the IP's that I want to get a response and a generic block to cover everything else. However, this does not seem to work and any IP can ping my router.
Does anyone have any idea of how to configure/restrict this? Is it even possible on a 2860N? I am running the latest 3.8.9 firmware.

Please Log in or Create an account to join the conversation.

More
13 Jun 2018 12:18 #92086 by admin
Replied by admin on topic Re: Restrict ICMP to specific IP's

so only certain IP's get a response.



how many public IP addresses do you have ?



Forum Administrator

Please Log in or Create an account to join the conversation.

  • sgibbs
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
13 Jun 2018 13:31 #92088 by sgibbs
Replied by sgibbs on topic Re: Restrict ICMP to specific IP's
I have a /29 IP block, so 6 usable IP's. I only need to allow ping on one of them. However, as long as I can restrict who can ping my WAN IP Aliases it wouldn't be an issue if all 6 responded.

Please Log in or Create an account to join the conversation.

  • sgibbs
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
13 Jun 2018 14:20 #92089 by sgibbs
Replied by sgibbs on topic Re: Restrict ICMP to specific IP's
Have just had this response from support:

On our DrayOS routers, it's not possible to restrict certain IP's to ping the router. Sorry for the inconvenience.



:-(

Please Log in or Create an account to join the conversation.

More
13 Jun 2018 14:33 #92090 by admin
Replied by admin on topic Re: Restrict ICMP to specific IP's
You can probably block certain IPs...but not on the WAN side because the firewall comes after that.



Forum Administrator

Please Log in or Create an account to join the conversation.

Moderators: ChrisSami