Topic Options
#999 - 11/16/03 12:33 AM Can't ping past router/firewall
Mobius Offline


Registered: 11/16/03
Posts: 3
Loc: New Zealand
Version 2.20
OS: Windows XP Pro
DSL/Router/Firewall: Dynalink RTA220

I have the router and firewall active, and run ZoneAlarm Pro (3.25) also. When I ping external IPs, it always times out - using "ping" or "tracert" or Ping Plotter - results are always the same. I see my router IP - and nothing beyond that.

Do I need forward some port specifically to my PC?

What settings might I need to change on my router/firewall or PC to be able to trace again?

I can play games on the 'net, and so can the other PCs on the LAN - even the saqme game, in the same extrenal server. (I have NAT enabled).

Thanks in advance.
_________________________
How many escape pods are there? "NONE,SIR!" You counted them? "TWICE, SIR!"

Top
#1000 - 11/20/03 02:29 PM Re: Can't ping past router/firewall [Re: Mobius]
Pete Ness Offline



Registered: 08/30/99
Posts: 1106
Loc: Boise, Idaho
Some routers aren't configured to pass ICMP - and many firewalls are configured to block as well. In addition, some ISP's block ICMP echo requests, replies and/or TTL expired messages.

If you can see your router (which is a different address from your PC, right?), then it's probably not ZoneAlarm causing the problems, but more likely your router - or your ISP.

You might do some Google searches on your router brand and model number along with "ICMP", "PING" and/or "TRACERT" to see if there is any information out there on this. I did a quick search on this and it looks like your hardware probably supports ICMP - although it may not be configured (I didn't get far enough in to this to check it, but that's a possibility).

You should also try doing a search on your ISP with the same terms - to see if people are noticing problems with your ISP. Due to the worm/virus/trojan attacks we've had recently, many ISPs have started blocking or restricting ICMP echo requests - a call to your ISP's support department might be able to help with this too.

No answers here - just some ideas.

Top
#1001 - 11/20/03 04:49 PM Re: Can't ping past router/firewall [Re: Pete Ness]
Mobius Offline


Registered: 11/16/03
Posts: 3
Loc: New Zealand
OK, it was ICMP blocked at the router - got that sorted.

However, my solution was to open ICMP on ports 0-65535!!

I have no idea what port the PING command uses - so can anyone tell me what restricted port range I should allow ICMP on? Thanks in advance.
_________________________
How many escape pods are there? "NONE,SIR!" You counted them? "TWICE, SIR!"

Top
#1002 - 11/20/03 05:11 PM Re: Can't ping past router/firewall [Re: Mobius]
Pete Ness Offline



Registered: 08/30/99
Posts: 1106
Loc: Boise, Idaho
Hmmm. ICMP doesn't actually use a port - it's a bit below that level. It might just be an artifact of the configuration in your router that it does it like this. You might try just opening port 7 (which is the echo port, but not ICMP echo) and see if that works any different. Since UDP and TCP use ports, the configuration on your router might just always ask for ports...

Top
#1003 - 11/20/03 11:32 PM Re: Can't ping past router/firewall [Re: Pete Ness]
Mobius Offline


Registered: 11/16/03
Posts: 3
Loc: New Zealand
Thanks a lot! <img src="/forums/images/icons/smile.gif" alt="" />
_________________________
How many escape pods are there? "NONE,SIR!" You counted them? "TWICE, SIR!"

Top

Search

Who's Online
0 registered (), 17 Guests and 0 Spiders online.
Key: Admin, Global Mod, Mod