Allow ping from specific ip address

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Author Message
ddwrt_user_42
DD-WRT Novice


Joined: 10 Jan 2022
Posts: 12

PostPosted: Tue Jan 25, 2022 21:09    Post subject: Allow ping from specific ip address Reply with quote
We have Nextiva voip at our business and Nextiva engineers are needing to troubleshoot their service with our router. They are needing to ping our router from one their ip address.

Is this done through dd wrt administration->command shell and with ip tables?

Also, is SIP ALG already disabled in the dd-wrt firmware?

Any help would be appreciated.

Nextiva Networking: https://www.nextiva.com/support/articles/nextiva-networking-guidelines.html
-------------------------------------------
Firmware: DD-WRT v3.0-r47976 std (01/06/22)
Router: Netgear R7000
Sponsor
Wildlion
DD-WRT Guru


Joined: 24 May 2016
Posts: 1414

PostPosted: Wed Jan 26, 2022 1:58    Post subject: Reply with quote
On security firewall you may be able to uncheck the "Block Anonymous WAN Requests (ping)" and save an apply,

Otherwise the iptables command is:
Code:
iptables -I INPUT 1 -p icmp -j ACCEPT


This will accept all pings... it will ensure that whatever your ISP uses to troubleshoot will work.


Edit:

I forgot to add that last I knew there was no SIP ALG in DD-WRT, but it could have changed.
ddwrt_user_42
DD-WRT Novice


Joined: 10 Jan 2022
Posts: 12

PostPosted: Wed Jan 26, 2022 3:12    Post subject: Allow ping from specific ip address Reply with quote
Wildlion wrote:
On security firewall you may be able to uncheck the "Block Anonymous WAN Requests (ping)" and save an apply,

Otherwise the iptables command is:
Code:
iptables -I INPUT 1 -p icmp -j ACCEPT


This will accept all pings... it will ensure that whatever your ISP uses to troubleshoot will work.


Edit:

I forgot to add that last I knew there was no SIP ALG in DD-WRT, but it could have changed.


Hello Wildlion,

Thanks for the response! I was wondering through that ip table code, is there a way to allow one ip address to ping our router public wan ip instead of accepting all pings?

Mile-Lile
DD-WRT Guru


Joined: 24 Feb 2013
Posts: 1634
Location: Belgrade

PostPosted: Wed Jan 26, 2022 8:54    Post subject: Reply with quote
Code:
iptables -I INPUT 2 -s xxx.xxx.xxx.xxx -p icmp -j ACCEPT


switch xxx.xxx.xxx.xxx with real IP...
ddwrt_user_42
DD-WRT Novice


Joined: 10 Jan 2022
Posts: 12

PostPosted: Wed Jan 26, 2022 21:34    Post subject: Allow ping from specific ip address Reply with quote
Thanks guys! It worked! Appreciate the help!
jjwatmyself
DD-WRT User


Joined: 19 Mar 2016
Posts: 55

PostPosted: Fri Jan 28, 2022 3:07    Post subject: Reply with quote
If you're interested in some cloud monitoring, you can also expand your configuration. Uptime Robot example is at the bottom of this thread.

https://forum.dd-wrt.com/phpBB2/viewtopic.php?p=8962&sid=a273149fc3a36bdd3bc342b37b1fb703

_________________
--------------------------------------------------
VLANs, port trunking, virtual SSID (Guest)
DNSmasq, NTP, syslog, nflow
Hub and spoke, multi-site, routed VPN (OpenVPN client), split tunnel
1 DNS zone per site, forward, reverse look-up across all sites

Asus RT-AC68U rev A2 DD-WRT v3.0-r48138 std (01/17/22)
Asus RT-AC68U rev C1 DD-WRT v3.0-r48138 std (01/17/22)
Asus RT-AC1900P DD-WRT v3.0-r48138 std (01/17/22)
Asus RT-AC1900P DD-WRT v3.0-r48138 std (01/17/22)
Netgear R7000 DD-WRT v3.0-r48138 std (01/17/22)
Linksys E2000 DD-WRT v3.0-r33492 mega (10/10/17)
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum