Disable ICMP From Outside

RouterOS General
1

Hi there I want to disable icmp my router from outside i try this role :
add chain=input, protocol=icmp, action = drop
and worked but there is a problem ; i cant ping anything inside my router (8.8.8.8 time out from my router telnet) !!! it means my icmp protocol disabled complatly from inside and outside
please help to solve this problem ; disable icmp from outside without disabling my local network icmp

2

See basic firewall examples in the manual:
https://help.mikrotik.com/docs/display/ROS/First+Time+Configuration#heading-ProtectingtheRouter

3

Input chain only affects traffic to the router and not through the router.
There is no reason why you should not be able to ping from within the LAN to the internet.

Need to see the config …
/export hide-sensitive file=anynameyouwish

4

i just add this role that it … add chain=input, protocol=icmp, action = drop

i thing this is a bug ; my clients have google ping but telnet not !!!

5

Of course it will drop incoming ICMP packets because you added rule to drop all incoming ICMP packets.
Read the article I provided earlier to at least understand the basics of how to set up firewall rules.

6

when U ping somewhere in world you will receive an answers from that host
when you drop ping packets the answers from the host cannot be received