Block pingin

RouterOS Beginner Basics
1

can anybody tell me how can i block pingin from my customer’s to my routers.., so when they try to ping my ip router xxx.xx.xx.x to block theyre ping..if it is any rules tell me it, or it is possible to be ablle just an ip address to ping the router..

With ReSpeCt AlteRnatIVi

2

block icmp protocol.

but also consider that you will block some useful things.

3

/ip firewall filter
chain=input
protocol=icmp
action=drop

4

Dropping all ICMP is a bad idea, as you will drop things you don’t want to.

To just block pings, drop ICMP type codes 8 and 0 (recho request and reply). You can configure that in the firewall rules…

5

yes i just wanna block pings, drop ICMP type codes 8 and 0, but can you tell me how to configure that in firewall rules..or it is possible to ping just an ip address block others…

With REspeCt AlTErNATiVI

6

there is a parameter in the firewall filter:

icmp-options (integer:integer) - matches ICMP Type:Code fields

7

man i dont know, if you understand me, i wanna block ping for other ip addressess, because if i drop pinging then i can’t access on it, so i wanna block pingin for other clients, and just my private ip address that i use in my pc have access in the router…

Hope that you understand me..With REspeCt

8

This is exactly what roadrunner does, and i cannot use Remote desktop viewer when i cannot ping or access the IP given… really sucks and really annoying… Just though i would post a useless post… Roadrunner :angry: :imp:

9

does anybody have any advice about block pingin to my customers, because everyday they try to enter in other customer bridges…and i cannot change 200 password bridges for a day..

10

how are the customers connected to each other? over a switch/hub? in that case there is nothing you can do.

11

they are connected with bridge antena (wireless) in sector (2.4 Ghz), and normally that they can ping each other bridge antena..so i wanna block this ping, like when the customer use DHCP they cannot ping notething just work in internet…

THankYOu

12

I think you want to disable “Default Forward” on the wireless interface for the sector antenna

13

i dont know my friend, what you mean , but the only thing that i wanna do is that the costumers cannot ping nothing.., but just costumers, because if i dont ping the router i cannot access in it..

14

Hi all ;
Glad to write here again .
yes disabling the forwarding for any server or interface means that you disable the link between the clients , so they can not communicate between each other and only will go to their gateway for internet .
Also if you used pppoe server then every client will see only him self and the server .
with best regards .

15

ok, if you think that its a solution for this reques then can you write me this procedure, or this rule how to make this, and i dont wanna use pppoe server, im using static Ip..