PING from Outside

RouterOS General
1

Hello,
I have some Public IPs alloted to MT server…I dont want that all the public IPs cant Ping from out side network.

I mean nobody can ping My network from outside.

How to do that…I am confused with the filter rule..


ASHISH

2

you must set up DST NAT or routing.

3

Thank Normis,

Please explain me litte more

Thanks in Advance

4

how can the outside network know that you have an internal network? you must either set up routing in your ISPs router, or you must use DST-NAT on the Mikrotik Router to redirect all connection requests to your internal network. This is explained here:

http://www.mikrotik.com/testdocs/ros/2.9/ip/nat.php

and here:

http://wiki.mikrotik.com/wiki/How_to_link_Public_addresses_to_Local_ones

5

Normis Thanks Again,

I just want that NO one can ping my Public IP from Out side my Network…

I mean i have 59.160.X.X ip assigned to my MT, It is possible to ping from my network, But i dont want that someone from outside my network can PIng the same IP,

Just want to drop ICMP from outside network


Thanks Again

6

sorry, I misunderstood :slight_smile:

Just make a firewall rule that blocks communication from the public interface to the local networks

7

Thanks Its working

ASHISH

8

if the only problem is ping then block just ICMP traffic to that ip :unamused:

9

just make sure you block only ICMP, because otherwise their internet will stop working too :slight_smile:

10

Sure SIR

Thanks