Pings on the internal network to the firewall server are being blocked.

[FosterSM]

I have just noticed that on my internal network I cannot ping my firewall server all other destinations internal and external are fine. I expect that pings from the internet to the external interface should be blocked but not the internal ones. I am currently using v2.1.1. My config file: firewall.conf.txt What do I need to change. Thanks

[abelbeck]

Hi @FosterSM : diff'ing your config from the default firewall.conf, you have many changes, among them:

 # Enable to ignore all ICMP echo-requests (IPv4) on ALL interfaces.
 # ------------------------------------------------------------------------------
-ECHO_IGNORE=0
+ECHO_IGNORE=1

Try setting ECHO_IGNORE=0 which is the default.

[FosterSM]

Thanks for the help, ping now works. Is there anything else in my firewall.conf that is wrong, it has evolved over different releases of the the firewall and I am now concerned that it may be compromised.

[abelbeck]

@FosterSM : A quick look, nothing jumped out at me.

Possibly a good idea would be to diff your current config with the default and revert to the default any changes you don't recall doing.

For v2.1.1, the default firewall.conf is: https://raw.githubusercontent.com/arno-iptables-firewall/aif/2.1.1/etc/arno-iptables-firewall/firewall.conf

[FosterSM]

I have checked with "SheildsUp" everything is green apart from port 445 which is shown has closed.

[FosterSM]

I will review my firewall.conf thanks.