OpenWrt Forum Archive

Topic: Is it possible to block pinging (ICMP) and all ports except one?

The content of this topic has been archived on 7 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Post #1
ghurty
10 Nov 2009, 06:38

Is it possible to block pinging (ICMP) to the internet and all ports except one?


I dont want user to be able to figure out IP address.


Thanks

Post #2
awaum
10 Nov 2009, 14:42
ghurty wrote:

Is it possible to block pinging (ICMP) to the internet and all ports except one?

You mean physical ports, right ?

You have to separate the ports into different VLANs, which of course means, you have to split up your network.
Your firewall knows nothing about a switch port, unless it can be assigned to a specific interface.

(Last edited by awaum on 10 Nov 2009, 14:43)

The discussion might have continued from here.