Chapter 6 – RouteFinder Software
Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E)
110
Packet Filters > ICMP
Packet Filters > ICMP
ICMP
(Internet Control Message Protocol) is necessary to test network connections and to test functionality of
your firewall. It is also used for diagnostic purposes.
ICMP-forwarding and ICMP-on-firewall always apply to all IP addresses (“Any”). When these are enabled, all
IPs can ping the firewall (ICMP-on-firewall) or the network behind it (ICMP-forwarding). Separate IP addresses
can then no longer be ruled out with packet filter rules. If the ICMP settings are disabled, separate IPs and
networks can be allowed to send ICMP packets through the firewall by using appropriate packet filter rules.
Firewall Options When Load Balancing Is Enabled
ICMP Forwarding
Check the ICMP Forward checkbox to enable the forwarding of
ICMP
packets through the
RouteFinder into the local network and all connected DMZs. In this way you select whether an
ICMP packet should be dropped or passed through to the local network and all connected DMZs
.
If
ICMP forward
is enabled, ICMP packets go through all connected networks. Another use of ICMP
forwarding is to allow ICMP packets to be forwarded to individual networks (set in
Packet Filter >
Rules
). For this,
ICMP forward
in
Packet Filter > ICMP
must be disabled.
The status is activated by clicking the
Save
button.
ICMP on Firewall
Check the options you want enabled to send and receive
ICMP
packets directly by the RouteFinder.
Then click the
Save
button.
Note:
To be able to use the tools
Trace Route
and
Ping
, the function
ICMP on firewall
must be
enabled. After a successful startup of the RouteFinder, it is recommended that you disable this rule
so that the RouteFinder cannot be pinged anymore.
