DD-WRT :: View topic - [SOLVED] How to Allow ping from internet?

[SOLVED] How to Allow ping from internet?

This topic is locked: you cannot edit posts or make replies.

DD-WRT Forum Index -> Broadcom SoC based Hardware

Author

Message

tecnomad
DD-WRT Novice

Joined: 10 Jul 2006
Posts: 6
Location: Monza - Italy

Posted: Mon Jul 10, 2006 14:05 Post subject: [SOLVED] How to Allow ping from internet?
Hi at all, my system is an Linksys WRT54GL with dd-wrt v23 SP1. My request is how to allow an range IP from internet to ping my WAN port. If this is not possible how can allow to ping my wan port from all internet? With search button i find any tips. Thanks for the support. _________________ MAD Cydoniamensae.Net

Sponsor

ross
DD-WRT Novice

Joined: 09 Jul 2006
Posts: 5

Posted: Mon Jul 10, 2006 14:11 Post subject:
Login via telnet. Issue the commands: iptables -A INPUT -i eth0 -s 0.0.0.0/24 -p ICMP -j ACCEPT Replacing 0.0.0.0/24 with your ip address range. I think this will work, but it's late and I havent tested it.

dicksons
DD-WRT Guru

Joined: 07 Jun 2006
Posts: 980
Location: Coal Creek Canyon, Colorado

Posted: Mon Jul 10, 2006 14:13 Post subject:
On the Security Tab, uncheck "Block anonymous internet requests" I don't know why the label for this couldn't be more clear about Wan Pings..... _________________ linksys GSv2, Gv4, Gv2, GLv1, G-TM, Buffalo wbr2, whr, whr-hp, whr-g125, wli-tx4-g54hp, Moto wr850gp, Alix.3C2

tecnomad
DD-WRT Novice

Joined: 10 Jul 2006
Posts: 6
Location: Monza - Italy

Posted: Mon Jul 10, 2006 14:38 Post subject:

dicksons wrote:

On the Security Tab,

uncheck "Block anonymous internet requests"

I don't know why the label for this couldn't be more clear about Wan Pings.....

Thanks dicksons! With this the Router accept ALL ICMP packet.
After a rapid read of IPTABLES i has construct this rule:

Code:

iptables -A INPUT -s 88.149.128.0/24 -p icmp -j ACCEPT

With this I want to accept all ICMP from "88.149.128.0/24" CIDR range, you think that this rule work? I'm an Windows user... Embarassed

_________________
MAD
Cydoniamensae.Net

tecnomad
DD-WRT Novice

Joined: 10 Jul 2006
Posts: 6
Location: Monza - Italy

Posted: Mon Jul 10, 2006 15:11 Post subject:

ross wrote:

Login via telnet.

Issue the commands:

iptables -A INPUT -i eth0 -s 0.0.0.0/24 -p ICMP -j ACCEPT

Replacing 0.0.0.0/24 with your ip address range.

I think this will work, but it's late and I havent tested it.

Sorry ross, but I'd read your reply... Exclamation

Ok, can you explain me because you use eth0 interface and not br0 or ppp0?

Thanks in advance
_________________
MAD
Cydoniamensae.Net

ross
DD-WRT Novice

Joined: 09 Jul 2006
Posts: 5

Posted: Mon Jul 10, 2006 21:56 Post subject:
Sure, I'm as new to iptables as you are. This website (http://www.remoteroot.net/2006/06/cheap-linux-firewall-iptables-on.php) explains a bit. When I was testing things out, I used 'ifconfig' to grab a list of devices and found that eth0 was the WAN port. The command I gave you should work, but I've been told it's better to use vlan1 in this circumstance.

WaS
DD-WRT Guru

Joined: 06 Jun 2006
Posts: 731
Location: Erlangen, Germany

Posted: Tue Jul 11, 2006 10:02 Post subject:

dicksons wrote:

[re."Block anonymous internet requests"]
I don't know why the label for this couldn't be more clear about Wan Pings.....

The developers have announced to improve the online help page,
but this is not yet reflected in the latest (July 11) release of v23.

jjwatmyself
DD-WRT User

Joined: 19 Mar 2016
Posts: 55

Posted: Tue Nov 23, 2021 23:58 Post subject:

Here is the full script to allow ICMP from Uptimerobot:

Administration > Commands > Paste the commands below then > Save Firewall

Code:

iptables -I INPUT 1 -i vlan2 -s 69.162.124.224/28 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 63.143.42.240/28 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 216.245.221.80/28 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 208.115.199.16/28 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 216.144.250.150 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 46.137.190.132 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 122.248.234.23 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 167.99.209.234 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 178.62.52.237 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 54.79.28.129 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 54.94.142.218 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 104.131.107.63 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 54.67.10.127 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 54.64.67.106 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 159.203.30.41 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 46.101.250.135 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 18.221.56.27 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 52.60.129.180 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 159.89.8.111 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 146.185.143.14 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 139.59.173.249 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 165.227.83.148 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 128.199.195.156 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 138.197.150.151 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 34.233.66.117 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 52.70.84.165 -p ICMP -j ACCEPT
iptables -I INPUT 1 -i vlan2 -s 54.225.82.45 -p ICMP -j ACCEPT

You can confirm before and after from a CLI prompt, running the following command:

Code:

iptables -L INPUT --line-numbers -v

_________________
--------------------------------------------------
VLANs, port trunking, virtual SSID (Guest)
DNSmasq, NTP, syslog, nflow
Hub and spoke, multi-site, routed VPN (OpenVPN client), split tunnel
1 DNS zone per site, forward, reverse look-up across all sites

Asus RT-AC68U rev A2 DD-WRT v3.0-r48138 std (01/17/22)
Asus RT-AC68U rev C1 DD-WRT v3.0-r48138 std (01/17/22)
Asus RT-AC1900P DD-WRT v3.0-r48138 std (01/17/22)
Asus RT-AC1900P DD-WRT v3.0-r48138 std (01/17/22)
Netgear R7000 DD-WRT v3.0-r48138 std (01/17/22)
Linksys E2000 DD-WRT v3.0-r33492 mega (10/10/17)

the-joker
DD-WRT Developer/Maintainer

Joined: 31 Jul 2021
Posts: 2146
Location: All over YOUR webs

Posted: Wed Nov 24, 2021 4:49 Post subject:

@jjwatmyself

Necroposting? The last reply before yours here was from 2006.

Thanks for the heads up and will lock.

Thanks and have a nice day Wink

_________________
Saving your retinas from the burn!🔥
DD-WRT Inspired themes for routers
DD-WRT Inspired themes for the phpBB Forum
DD-WRT Inspired themes for the SVN Trac & FTP site
Join in for a chat @ #style_it_themes_public:matrix.org or #style_it_themes:discord

DD-WRT UI Themes Bug Reporting and Discussion thread

Router: ANus RT-AC68U E1 (recognized as C1)

Display posts from previous:

Page 1 of 1

DD-WRT Forum Index -> Broadcom SoC based Hardware

All times are GMT

Navigation

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum

Log in

[SOLVED] How to Allow ping from internet?

Quick Links

Log in