Can't ping past router/firewall

Posted by: Mobius

Can't ping past router/firewall - 11/16/03 12:33 AM

Version 2.20
OS: Windows XP Pro
DSL/Router/Firewall: Dynalink RTA220

I have the router and firewall active, and run ZoneAlarm Pro (3.25) also. When I ping external IPs, it always times out - using "ping" or "tracert" or Ping Plotter - results are always the same. I see my router IP - and nothing beyond that.

Do I need forward some port specifically to my PC?

What settings might I need to change on my router/firewall or PC to be able to trace again?

I can play games on the 'net, and so can the other PCs on the LAN - even the saqme game, in the same extrenal server. (I have NAT enabled).

Thanks in advance.
Posted by: Pete Ness

Re: Can't ping past router/firewall - 11/20/03 02:29 PM

Some routers aren't configured to pass ICMP - and many firewalls are configured to block as well. In addition, some ISP's block ICMP echo requests, replies and/or TTL expired messages.

If you can see your router (which is a different address from your PC, right?), then it's probably not ZoneAlarm causing the problems, but more likely your router - or your ISP.

You might do some Google searches on your router brand and model number along with "ICMP", "PING" and/or "TRACERT" to see if there is any information out there on this. I did a quick search on this and it looks like your hardware probably supports ICMP - although it may not be configured (I didn't get far enough in to this to check it, but that's a possibility).

You should also try doing a search on your ISP with the same terms - to see if people are noticing problems with your ISP. Due to the worm/virus/trojan attacks we've had recently, many ISPs have started blocking or restricting ICMP echo requests - a call to your ISP's support department might be able to help with this too.

No answers here - just some ideas.
Posted by: Mobius

Re: Can't ping past router/firewall - 11/20/03 04:49 PM

OK, it was ICMP blocked at the router - got that sorted.

However, my solution was to open ICMP on ports 0-65535!!

I have no idea what port the PING command uses - so can anyone tell me what restricted port range I should allow ICMP on? Thanks in advance.
Posted by: Pete Ness

Re: Can't ping past router/firewall - 11/20/03 05:11 PM

Hmmm. ICMP doesn't actually use a port - it's a bit below that level. It might just be an artifact of the configuration in your router that it does it like this. You might try just opening port 7 (which is the echo port, but not ICMP echo) and see if that works any different. Since UDP and TCP use ports, the configuration on your router might just always ask for ports...
Posted by: Mobius

Re: Can't ping past router/firewall - 11/20/03 11:32 PM

Thanks a lot! <img src="/forums/images/icons/smile.gif" alt="" />