controlling pings

RouterOS General
1

Hello,

I need some help in configuring ping control, is there a forward rule to control normal pinging and reject exessive pings, so only normal ping passes through for test and checking route purposes.

Many thanks,

2

Have a look at:

http://wiki.mikrotik.com/wiki/Securing_your_router

Particularly the icmp rules:

/ip firewall filter
add chain=input protocol=icmp limit=50/5s,2 comment="Allow limited pings" 
add chain=input protocol=icmp action=drop comment="Drop excess pings"

This is in the input chain for pings to the router, but you can use similar rules in the forward chain too

Nick.

3

Thanks for answering. I have the below but it seems i cannot ping anything with this rule on :-

add action=reject chain=icmp comment=“excess pings” disabled=no limit=500,600 protocol=icmp reject-with=icmp-admin-prohibited

i think i might need to add /32 to make it per ip and may be increase the limits ?