How to disable host unreachable message reply to ICMP.

RouterOS General
1

Is there a quick and easy method to do this? On Cisco it’s just “no ip unreachables”

I want ICMP enabled for all src & dst addreses, but if a device is unreachable, I just want the packet dropped, no reply. Causing havoc with ICMP based network monitoring tools.

Thanks!

Brian

[Decided] Destination Host Unreachable in the IP, which is not connected
2

“Destination unreachable” is ICMP type 3.

So this:

/ip firewall filter add protocol=icmp icmp-options=3 chain=forward action=drop

should prevent any such ICMP packets from being forwarded through the router. If you want to prevent RouterOS itself from generating such messages dropping them in the output chain should do the trick.