Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pings on the internal network to the firewall server are being blocked. #94

Open
FosterSM opened this issue Aug 7, 2023 · 5 comments
Open

Comments

@FosterSM
Copy link

FosterSM commented Aug 7, 2023

I have just noticed that on my internal network I cannot ping my firewall server all other destinations internal and external are fine.
I expect that pings from the internet to the external interface should be blocked but not the internal ones.
I am currently using v2.1.1.
My config file:
firewall.conf.txt
What do I need to change.
Thanks

@abelbeck
Copy link
Contributor

abelbeck commented Aug 7, 2023

Hi @FosterSM : diff'ing your config from the default firewall.conf, you have many changes, among them:

 # Enable to ignore all ICMP echo-requests (IPv4) on ALL interfaces.
 # ------------------------------------------------------------------------------
-ECHO_IGNORE=0
+ECHO_IGNORE=1

Try setting ECHO_IGNORE=0 which is the default.

@FosterSM
Copy link
Author

FosterSM commented Aug 7, 2023

Thanks for the help, ping now works.
Is there anything else in my firewall.conf that is wrong, it has evolved over different releases of the the firewall and I am now concerned that it may be compromised.

@abelbeck
Copy link
Contributor

abelbeck commented Aug 7, 2023

@FosterSM : A quick look, nothing jumped out at me.

Possibly a good idea would be to diff your current config with the default and revert to the default any changes you don't recall doing.

For v2.1.1, the default firewall.conf is:
https://raw.githubusercontent.com/arno-iptables-firewall/aif/2.1.1/etc/arno-iptables-firewall/firewall.conf

@FosterSM
Copy link
Author

FosterSM commented Aug 7, 2023

I have checked with "SheildsUp" everything is green apart from port 445 which is shown has closed.

@FosterSM
Copy link
Author

FosterSM commented Aug 7, 2023

I will review my firewall.conf thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants