I have seen a continual stream of ICMP packets from my WAN router to the Mikrotik pppoe-client that are blocked.
Where 192.168.1.1 is the WAN router and 192.168.1.33 is the initlal router IP address.
Code: Select all
Invalid Input input: in:ether1 out:(unknown 0), src-mac f4:69:42:0f:e8:10, proto ICMP (type 3, code 1), 192.168.1.1->192.168.1.33, len 92
I presume that the WAN router is doing a status check. Is it OK to leave this blocked or what sort of rule should I use to allow this specifically - there is a general ICMP input rule already but it doesn't seem to allow this particular traffic.
Any advice appreciated.