Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 13 replies
  • Subscribers 2 subscribers
  • Views 6303 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ping over bridge

luigi.crevatin
Hello everybody,
On an UTM120 v9.004-33 I've configured 2 ethenet port in bridge mode; the ruleset in the firewall configuration is very simple and it works (example RDP, mail, web). 
In the "ICMP"  tab under "Network protection""Firewall" I checked every flag except the "Log ICMP redirect", but the ping doesn't work from one side to the other of the bridge [:S] .

Btw I need that ping works, because there are some video application that require it.

Any ideas ???

Thanks in advance

Luigi


This thread was automatically locked due to age.
  • 0
    Hi everybody,
    sorry for late but 6 days ago I open a support ticket and 2 days ago I got the confirm that when BRIDGED mode is active, in "Network protection""Firewall""ICMP" you must leave UNCHECKED:
            Allow ICMP on Gateway
    Allow ICMP through Gateway
    Log ICMP redirects
            Gateway forwards Pings
            Gateway forwards Traceroute

    Now everything works.

    Thanks to everybody

    Luigi
  • 0
    Thanks for the update... Perhaps this needs to be added to the documentation?

    Barry
  • 0
    Someone at Sophos has said that this is not a bug, but intended behavior.  If that's right, then it's a design error - it shouldn't work like this!

    In fact, if you disable those selections on the ICMP tab, you can't do a ping or a traceroute from WebAdmin - although you still can do so from the command line.

    Cheers - Bob