C O N F I G U R I N G C O M S I F T E R
User Guide |
ComSifter CS-8D Pro
3–37
Ping and Traceroute
Ports
8
(ICMP)
By default:
ComSifter is configured to allow all ICMP requests from the LAN to the firewall. This allows ComSifter to
always reply to pings and traceroute commands from inside the LAN.
This may not be changed.
ComSifter will not reply to a ping request from the Internet. This allows ComSifter’s firewall to operate in a
stealth mode (i.e. it does not exist). Use the rule shown below to reply to a ping from the Internet.
Warning:
Allowing a ping from the Internet will confirm the existence of your location to
potential hackers. Best practices suggest that this only be for testing purposes.
ComSifter will not allow ping requests from the LAN to the Internet. Using the rule shown below ComSifter
can be configured to allow ping from the LAN to the Internet.
To allow a ComSifter to reply to a Ping request from the Internet apply the following rule.
Figure 3-43
: Allow Ping from the Internet
To allow a client on the LAN to ping addresses on the Internet apply the following rule.
Figure 3-44
: Client Access to Ping
Summary of Contents for CS-8D Pro
Page 1: ...ComSifter protect web users now User Guide Model CS 8D Pro Version March 26 2012 0326121500 ...
Page 153: ...F I L T E R S E T U P User Guide ComSifter CS 8D Pro 4 23 Figure 4 19 Modify Page RegEx ...
Page 194: ...U S E R S User Guide ComSifter CS 8D Pro 6 28 Figure 6 19 Windows Firewall ...
Page 215: ...U S E R S User Guide ComSifter CS 8D Pro 6 49 Figure 6 40 Add User ...
Page 219: ...U S E R S User Guide ComSifter CS 8D Pro 6 53 Figure 6 43 Add IP ...