PDA

Bekijk de volledige versie : No ping from lan to wan


Bunzzing
11-09-2005, 21:12
Product ID: WL500g in Home Gateway mode
Firmware version: 1.9.2.7
Firmware release: 1.9.2.7-6b

I have enabled all firewalls (lan2wan and wan2lan) which allows the common applications/protocols (mail, http, ftp, dns etc)

When I try to ping any host on the internet, I get a "Request timed out" message. The host name is resolved to an ip address however, so dns is working fine.

When I disable all firewalls, I can ping any host on the internet. However I cannot create a firewall filter in the webinterface for the icmp protocol, only for the tcp/udp protocols. I have absolutely no knowledge about creating a firewall rule from the telnet commandline (something to do with iptables i figured out).

Can someone explain to me what I have to do to allow icmp ping requests from my clients in my lan to the hosts on the internet with or without using the webinterface ?

Thanks in advance.
nerodark
12-09-2005, 06:34
i dont know but try to play with:

echo "0" >/proc/sys/net/ipv4/icmp_echo_ignore_all

or

echo "0" >/proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
Bunzzing
12-09-2005, 22:19
i dont know but try to play with:

echo "0" >/proc/sys/net/ipv4/icmp_echo_ignore_all

or

echo "0" >/proc/sys/net/ipv4/icmp_echo_ignore_broadcasts

From the command prompt within a telnet session ?
nucutza
12-12-2005, 20:06
I have the same problem :
I can't ping from lan to wan with or without firewall.
please help.
Bunzzing
21-12-2005, 21:22
I have the same problem :
I can't ping from lan to wan with or without firewall.
please help.

Hmm that's strange. I'm able to ping to an host on the internet when my LAN2WAN firewall is off. I get a reply. When my LAN2WAN firewall is on, I get a request timed out.

Both my LAN2WAN and WAN2LAN firewalls are enabled by the way.

But I already solved my problem not getting a reply on a ping request. In the Internet Firewall -> WAN & LAN Filter, there is an option called:

Filtered ICMP(LAN to WAN) packet types:

The value in the box was: 0 (zero)
I now entered the value of 8 and now icmp type 8 packets are filtered.

This is a line from my firewall log.

Dec 21 22:18:54 kernel: ACCEPT IN=br0 OUT=ppp0 SRC=192.168.y.z DST=160.33.26.10 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=62227 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=3586