Community discussions

MikroTik App
 
opalit
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Wed Aug 24, 2011 10:15 pm

Is it Normal for RouterOs to ping the gateway

Tue Oct 13, 2015 11:59 am

Is it normal for my RB1100AHx2 to ping the gateway even though check gateway is not enabled, i.e. not set to ping or arp.
 
User avatar
CyberTod
Long time Member
Long time Member
Posts: 510
Joined: Wed Jan 25, 2012 10:23 am

Re: Is it Normal for RouterOs to ping the gateway

Tue Oct 13, 2015 12:49 pm

Maybe you have netwatch enabled ?
 
opalit
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Wed Aug 24, 2011 10:15 pm

Re: Is it Normal for RouterOs to ping the gateway

Tue Oct 13, 2015 2:20 pm

Maybe you have netwatch enabled ?
No not enabled, as far as I am aware, I have nothing enabled that should be pinging the gateway.
 
opalit
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Wed Aug 24, 2011 10:15 pm

Re: Is it Normal for RouterOs to ping the gateway

Tue Oct 13, 2015 2:21 pm

I am getting hammered with pings from Iranian and German IP addresses as well.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Tue Oct 13, 2015 6:07 pm

So stop responding to them..
 
opalit
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Wed Aug 24, 2011 10:15 pm

Re:

Tue Oct 13, 2015 6:25 pm

So stop responding to them..
That is why I am trying to block pings, as posted elsewhere on this site, every time I try to block pings or turn off icmp type 0, echo reply, the internet stops working and all my customers PPPoE connections start dropping out.

At the moment it is restricted to 5

And the echo is blocked for those attacking IP addresses.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Tue Oct 13, 2015 6:55 pm

Is your current solution acceptable for you or still not so much?
 
opalit
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Wed Aug 24, 2011 10:15 pm

Re:

Tue Oct 13, 2015 7:03 pm

Is your current solution acceptable for you or still not so much?
I would like to block all ping replies but no solution offered on the forum sees to work, everything tried so far stops the internet working.
 
xunil76
newbie
Posts: 46
Joined: Fri May 20, 2011 12:48 am

Re: Is it Normal for RouterOs to ping the gateway

Tue Oct 13, 2015 9:53 pm

this should drop all pings without affecting your internet connection:
/ip firewall filter add action=drop chain=input comment=Ping protocol=icmp
 
opalit
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Wed Aug 24, 2011 10:15 pm

Re: Is it Normal for RouterOs to ping the gateway

Wed Oct 14, 2015 3:24 pm

this should drop all pings without affecting your internet connection:
/ip firewall filter add action=drop chain=input comment=Ping protocol=icmp
Re-checking the logs, it is replying to the gateways ping on the wan, if I block this ping the internet stops working, I can block all ping from elsewhere as long as I put in an accept rule for the gateway pings.

I am sure suppliers should not be doing this as anyone else noticed this happening?
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Fri Oct 16, 2015 8:04 am

It depends on your agreement with the isp. Kindly get in touch with them and clarify your needs and their approach. I am sure you can reach a working result.
 
opalit
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Wed Aug 24, 2011 10:15 pm

Re:

Fri Oct 16, 2015 11:40 am

It depends on your agreement with the isp. Kindly get in touch with them and clarify your needs and their approach. I am sure you can reach a working result.
I have, it is what they do and there was nothing in the agreement about this.

My last question was has anybody else come across this?.

I do not consider "kindly get in touch with supplier" a helpful answer, if you have nothing helpful to offer I would rather you did not add any comments at all, trolling is not helpful
 
andriys
Forum Guru
Forum Guru
Posts: 1527
Joined: Thu Nov 24, 2011 1:59 pm
Location: Kharkiv, Ukraine

Re: Re:

Fri Oct 16, 2015 1:29 pm

I do not consider "kindly get in touch with supplier" a helpful answer
That seems to be the only possible relevant answer, to be honest. Constantly pinging client's IP address is not usually required, still your ISP may have its own valid reasons for doing that. After all, there's nothing criminal in doing so. The only way to discover why your ISP pings you constantly is to go and ask them directly. No Other Way. Period.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26368
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Is it Normal for RouterOs to ping the gateway

Fri Oct 16, 2015 5:18 pm

The original post says that your router is pinging the gateway. Then later you say that somebody else (from iran) is pinging your router. Which one is it?
 
opalit
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Wed Aug 24, 2011 10:15 pm

Re: Is it Normal for RouterOs to ping the gateway

Fri Oct 16, 2015 5:49 pm

The original post says that your router is pinging the gateway. Then later you say that somebody else (from iran) is pinging your router. Which one is it?
It all started because of flood pings from Iran and Germany slowing down the network.

According to the logs it initially looked as if the RB was pinging the gateway that is because of the way they are written out, then I noticed that it was type 0 a reply, so checked logs for type 8 request from gateway and yes it was the gateway pinging the RB but when I put block rule on WAN, the internet went off and all my PPPoE users connection started dropping out.

**I have never come across blocking ping replies on WAN causing internet drop out, so I had not got a clue at first what was going on.

In the meantime I just blocked ping replies to the attackers.

Once I new it was pings from the gateway I contacted supplier, they confirmed that they do ping it and if it gets block the internet may not work, they only said may not work.

Once I new this I put in an accept rule for the gateway and an accept with limit rule for everything else to put a load on their device.

There is now a full block rule on for everything else except the gateway.

***I still have no idea why the block rule should stop the internet and cause PPPoE connections to drop
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26368
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Is it Normal for RouterOs to ping the gateway

Fri Oct 16, 2015 5:55 pm

Ok it is clear now. Well, it looks like this is the ISP policy, nothing the router is causing. I also can't imagine how the firewall for ping could affect your connection, unless somebody on the ISP side is intentionally checking this
 
opalit
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Wed Aug 24, 2011 10:15 pm

Re: Is it Normal for RouterOs to ping the gateway

Fri Oct 16, 2015 5:58 pm

Me neither but it does stop it and causes all PPPoE connections to drop, hence the panic

Who is online

Users browsing this forum: bertin, jishi, NetworqAndy, pstrauts, shaisha, tomnov, zabloc and 68 guests