• March 28, 2024, 04:12:44 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: ICMP blocked  (Read 20384 times)

StephenM71

  • Level 1 Member
  • *
  • Posts: 8
ICMP blocked
« on: December 10, 2014, 05:25:20 AM »

Hi

Can anyone tell me how to allow ICMP packets through the DIR880L firewall?

I've looked through the UG and can't find any information on this.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: ICMP blocked
« Reply #1 on: December 10, 2014, 06:53:59 AM »

Link>Welcome!

  • Link>What Firmware version is currently loaded? Found on the routers web page under status.
  • What region are you located?


Internet Service Provider and Modem Configurations
  • What ISP Service do you have? Cable or DSL?
  • What ISP Modem Mfr. and model # do you have?

Is there a problem with not getting ICMP packets? Please explain your configuration and set up.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

StephenM71

  • Level 1 Member
  • *
  • Posts: 8
Re: ICMP blocked
« Reply #2 on: December 10, 2014, 07:22:21 AM »

Firmware Version: 1.02
Hardware A1

Location UK.

My home network setup is:-

DIR-880L connected to ISP provided Huawei HG612 modem.

I am trying to ping the DIR-880L from a PC which is not on my home network. There is no response (presumably because ICMP is being blocked)

Previous routers I have had have a setting such as 'Enable WAN ping respond' which allows you to do this.

This is a good feature to have as it allows you to monitor the quality of your connection.

I can't find a way to do this on this router.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: ICMP blocked
« Reply #3 on: December 10, 2014, 07:33:29 AM »

  • If the ISP modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>Double NAT and How NAT Works. To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged. If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ. Also check the routers DHCP IP address maybe conflicting with the ISP modems IP address of 192.168.0.1. Check to see if this is the same on the ISP modem, and if modem can't be bridged, change the DIR router to 192.168.1.1 or .0.254.

Also Virtual Server or Port Forward configurations may need to be configured as WAN Ping Respond may not be a feature on this model router.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: ICMP blocked
« Reply #4 on: January 12, 2015, 10:44:22 AM »

Any status on this?  ???

Firmware Version: 1.02
Hardware A1

Location UK.

My home network setup is:-

DIR-880L connected to ISP provided Huawei HG612 modem.

I am trying to ping the DIR-880L from a PC which is not on my home network. There is no response (presumably because ICMP is being blocked)

Previous routers I have had have a setting such as 'Enable WAN ping respond' which allows you to do this.

This is a good feature to have as it allows you to monitor the quality of your connection.

I can't find a way to do this on this router.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

StephenM71

  • Level 1 Member
  • *
  • Posts: 8
Re: ICMP blocked
« Reply #5 on: January 22, 2015, 09:06:10 AM »

Apologies for not getting back to you.

Is does appear to be the case that WAN ping response is not a feature of the router which is a bit of an oversight I think.

The only way to do this with the router is to route the ICMP traffic through to a PC and get the PC to respond.

This means if the end user want's to do something like quality monitoring of their broadband link using a website which continuously pings their IP then they must route the traffic and leave their PC on all the time. :(
Logged

StephenM71

  • Level 1 Member
  • *
  • Posts: 8
Re: ICMP blocked
« Reply #6 on: January 22, 2015, 09:26:10 AM »

In theory a Virtual Server should work but when I enter a protocol of 'Other' and the number '1' for ICMP I get a protocol of 'null' in the table so It doesn't seem to work.

Port forwarding will not work as ICMP is a protocol.

As far as I can see there is no way to get this to work using this router.

I will have to switch back to a cheap old router I have to so these tests.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: ICMP blocked
« Reply #7 on: January 22, 2015, 09:36:07 AM »

Have you set up a firewall rule for the port(s) that you need as well as using Virtual Server?

  • If the ISP modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>Double NAT and How NAT Works. To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged. If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ. Also check the routers DHCP IP address maybe conflicting with the ISP modems IP address of 192.168.0.1. Check to see if this is the same on the ISP modem, and if modem can't be bridged, change the DIR router to 192.168.1.1 or .0.254.
    Example of a D-Link router configured for PPPoE with ISP Modem bridged: PPPoE Configuration on a Router
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

StephenM71

  • Level 1 Member
  • *
  • Posts: 8
Re: ICMP blocked
« Reply #8 on: January 22, 2015, 11:16:33 AM »

The windows firewall is setup to allow ICMP echo packets through.

I can't create a rule for ports in either the router or the windows firewall because ICMP is a protocol, it is not TCP/IP or UDP encapsulated.

My modem is a modem not a router. There are not 2 routers on my LAN.

I'll go back to using the old cheap router to perform these tests and hope DLINK decide to add a WAN ping feature in the future.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: ICMP blocked
« Reply #9 on: January 22, 2015, 02:14:10 PM »

What happens if you try putting the PC in the routers DMZ?
http://en.wikipedia.org/wiki/ICMP_hole_punching
http://en.wikipedia.org/wiki/ICMP_tunnel

Have you disabled DNS Relay?

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email.
Let us know how it goes please.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

StephenM71

  • Level 1 Member
  • *
  • Posts: 8
Re: ICMP blocked
« Reply #10 on: February 02, 2015, 02:33:42 PM »

I contacted support and they said that the WAN ping enable feature is not part of the feature set of this router but it should be allowed by default.

I have checked many times and I cannot ping the router from the WAN. LAN yes, WAN no.

When I swap in my cheap old router I can ping just fine so my ISP are not blocking ICMP packets.

This is a bit of an oversight on D-Links part in my opinion.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: ICMP blocked
« Reply #11 on: February 02, 2015, 06:43:36 PM »

Thanks for the feed back and letting us know what D-Link said. Did you ask them if they were going to fix it in the next update?

Hopefully it will be fixed on next update.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: ICMP blocked
« Reply #12 on: September 27, 2016, 11:34:34 AM »

Not sure if this has been address in the most current FW version or not.
http://forums.dlink.com/index.php?topic=65585.0

Care to try?  ???
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.