Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » ICMP traffic
  •  
bubblefish

Messages: 33
Karma: 0
Send a private message to this user
Anybody can help ?

My rules for ICMP

ICMP from Server ( Source = Firewall ) (Destination = Any ) (Service = PING ) ---- I can ping all Wan and LAN Servers.

ICMP form Lan Clients ( Source = all ) ( Destination = all ) (Service = Ping ) ---- Local Lan i can Ping all - WAN nothing

If I make a ping to www.etel.at

I get the IP from Etel and
no answer
no answer

In my traffic policy is the first rule ICMP from server and the secend rule is ICMP from Lan.

Log is on
[19/Jan/2007 20:39:28] PERMIT "ICMP traffic from Lan Clients" packet from LAN-INTERN, proto:ICMP, len:60, ip:192.168.0.3 -> 213.225.2.213, type:8 code:0
[19/Jan/2007 20:39:28] PERMIT "ICMP traffic from Lan Clients" packet to ADSL_INS, proto:ICMP, len:60, ip:192.168.0.3 -> 213.225.2.213, type:8 code:0
[19/Jan/2007 20:39:29] PERMIT "ICMP traffic from Lan Clients" packet from LAN-INTERN, proto:ICMP, len:60, ip:192.168.0.3 -> 213.225.2.213, type:8 code:0
[19/Jan/2007 20:39:29] PERMIT "ICMP traffic from Lan Clients" packet to ADSL_INS, proto:ICMP, len:60, ip:192.168.0.3 -> 213.225.2.213, type:8 code:0

thanks for help ....

  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
What about to translate source address for outgoing packets?

Modify rule
ICMP form Lan Clients ( Source = local clients ) ( Destination = external interface ) (Service = Ping ) and add Translation: NAT
  •  
bubblefish

Messages: 33
Karma: 0
Send a private message to this user
hi Kerio_pdobry

Thanks , thats is .....

thanks thanks thanks from Austria
Previous Topic: How to stop creation of .eml files
Next Topic: SSL Block Problem
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Wed Nov 22 15:44:21 CET 2017

Total time taken to generate the page: 0.00365 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.