Block Ping To Mikrotik OS

speedzonenetwork · October 27, 2009, 8:12am

Everyone Can Ping To My Server From LAN.

How Can i Block Ping So That No One Can Ping To Server?

Myron · October 27, 2009, 8:23am

try drop icmp src /24 to dst to your server IP in filter rules

thanks

kirshteins · October 27, 2009, 8:33am

You can drop only icmp echo requests

icmp-options=8:0-255 protocol=icmp

and/or icmp echo replies

icmp-options=0:0-255 protocol=icmp

coming from/going to your LAN. In this case rest of icmp will work.

speedzonenetwork · October 27, 2009, 11:02am

Please Guide Me In WinBox Interface.

kirshteins · October 27, 2009, 12:30pm

IP->Firewall->Filter Rules->“+”
General:
Chain=input
Src. Address=x.x.x.x/x (your LAN)
Protocol=icmp
Advanced:
ICMP type=echo request (under ICMP Options)
Action:
Action=drop

You can also use src-address-list instead of src-address if necessary

speedzonenetwork · October 27, 2009, 6:44pm

It Worked

Thanks Alot !