• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

ICMP pings still timing out despite ICMP traffic being reported as passed

Scheduled Pinned Locked Moved Firewalling
72 Posts 13 Posters 25.3k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • T
    timthetortoise
    last edited by Jan 3, 2014, 9:36 PM

    It works fine for everyone else. Not a pfSense bug.

    1 Reply Last reply Reply Quote 0
    • J
      JacktheSmack
      last edited by Jan 3, 2014, 10:01 PM

      @timthetortoise:

      It works fine for everyone else. Not a pfSense bug.

      But I've reset all the settings to default in pfsense and it's still having the issue. Could it be a hardware problem with the router?

      1 Reply Last reply Reply Quote 0
      • T
        timthetortoise
        last edited by Jan 4, 2014, 2:19 PM

        Could be an issue with your OS, your NIC, your pfSense box's NIC, your modem, your ISP, one of the routes leading to EA, a huge number of things could cause it. It worked fine for me with relatively strict rules, and it works fine for other people as well.

        1 Reply Last reply Reply Quote 0
        • J
          JacktheSmack
          last edited by Jan 10, 2014, 8:31 PM Jan 10, 2014, 8:24 PM

          @timthetortoise:

          Could be an issue with your OS, your NIC, your pfSense box's NIC, your modem, your ISP, one of the routes leading to EA, a huge number of things could cause it. It worked fine for me with relatively strict rules, and it works fine for other people as well.

          OK well it works fine when I disconnect my pfsense box and connect directly to my modem. It also worked fine with a DIR-655 from D-Link. The problem is definitely inside pfsense.

          The only thing I can see doing is posting our NICs. How would I figure out, through pfsense, what NIC I'm using?

          1 Reply Last reply Reply Quote 0
          • A
            autotalon
            last edited by Jan 11, 2014, 10:13 PM Jan 11, 2014, 9:23 PM

            I'm having the same problem as well.  All i've done is create a firewall rule to allow ICMP echo request and echo reply, as the dslreports ping test was failing without that.  Screenshot of above, and this is what determines whether the ping test works.  I tried disabling them and with them off, it says im not pingable.  with it on, the ping test works fine.  However even though I can pass a ping test I still cant see my ping in game.  Its just as others have described, shows only a dash. My UOtool results are similar to the OP.  The only thing I can think of is that static outbound may be required.  I have it enabled for half of my lan, I may try setting to an IP in that half and see if it makes a difference.

            ![pfsense firewall rules.png](/public/imported_attachments/1/pfsense firewall rules.png)
            ![pfsense firewall rules.png_thumb](/public/imported_attachments/1/pfsense firewall rules.png_thumb)

            1 Reply Last reply Reply Quote 0
            • A
              alphainfinity
              last edited by Jan 16, 2014, 3:29 AM Jan 16, 2014, 3:27 AM

              Same problem here. I have a cable AND dsl connection. When inside BF4, I can see pings on one connection, and no ping on the other connection. Same computer, different PFsense firewalls. When ssh'd into the firewall, ping works fine, ICMP returns data. It also works fine from the UI:
              Ping output:
              PING yahoo.com (98.139.183.24): 56 data bytes
              64 bytes from 98.139.183.24: icmp_seq=0 ttl=49 time=91.734 ms
              64 bytes from 98.139.183.24: icmp_seq=1 ttl=50 time=91.349 ms
              64 bytes from 98.139.183.24: icmp_seq=2 ttl=49 time=92.091 ms
              64 bytes from 98.139.183.24: icmp_seq=3 ttl=49 time=93.887 ms
              64 bytes from 98.139.183.24: icmp_seq=4 ttl=49 time=93.650 ms
              64 bytes from 98.139.183.24: icmp_seq=5 ttl=50 time=93.424 ms
              64 bytes from 98.139.183.24: icmp_seq=6 ttl=49 time=92.195 ms
              64 bytes from 98.139.183.24: icmp_seq=7 ttl=49 time=91.472 ms
              64 bytes from 98.139.183.24: icmp_seq=8 ttl=50 time=91.790 ms
              64 bytes from 98.139.183.24: icmp_seq=9 ttl=50 time=92.047 ms

              –- yahoo.com ping statistics ---
              10 packets transmitted, 10 packets received, 0.0% packet loss
              round-trip min/avg/max/stddev = 91.349/92.364/93.887/0.886 ms

              1 Reply Last reply Reply Quote 0
              • A
                autotalon
                last edited by Jan 17, 2014, 7:35 AM

                An addendum, I did set a rule to static outbound all ports and it made no difference.  So i dont believe that's the culprit in this case.

                1 Reply Last reply Reply Quote 0
                • W
                  wickid_good
                  last edited by Sep 11, 2014, 2:13 AM

                  Anyone figure this problem out yet? I have been trying different firewall settings for a week and have not made any headway.

                  1 Reply Last reply Reply Quote 0
                  • J
                    johnpoz LAYER 8 Global Moderator
                    last edited by Sep 11, 2014, 11:11 AM

                    because it has nothing to do with the firewall..  This thread is very old!!  Pings work from the client cmd prompt – and we have shown that the replys come back via sniff...  Its the tool!!  Or other software on yours and the OP box..

                    Do this -- run wireshark, run your testing tool..  Are the packets there, then its not pfsense..  Which has already been gone over in this thread quite a bit.

                    If I had to guess I would say software firewall where the tool using to test pings has not been given correct permissions in the software firewall, or just glitchy software/firewall your running.

                    If you see the pings go out and the replies come back then its not pfsense period!

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                    1 Reply Last reply Reply Quote 0
                    • J
                      JacktheSmack
                      last edited by Oct 31, 2014, 3:53 AM

                      @johnpoz:

                      because it has nothing to do with the firewall..  This thread is very old!!  Pings work from the client cmd prompt – and we have shown that the replys come back via sniff...  Its the tool!!  Or other software on yours and the OP box..

                      Do this -- run wireshark, run your testing tool..  Are the packets there, then its not pfsense..  Which has already been gone over in this thread quite a bit.

                      If I had to guess I would say software firewall where the tool using to test pings has not been given correct permissions in the software firewall, or just glitchy software/firewall your running.

                      If you see the pings go out and the replies come back then its not pfsense period!

                      What do I do to fix this then? Because when I plug pfsense in, the packets get blocked.

                      1 Reply Last reply Reply Quote 0
                      • J
                        johnpoz LAYER 8 Global Moderator
                        last edited by Oct 31, 2014, 11:44 AM

                        Again what part of they are NOT blocked do you not understand??  Run wireshark on the box your running your UOtrace do you see the pings come back like in picture from page 3 of this thread..  I just grabbed that tool again, and doesn't even grab a server list now because it is trying to query for shaggy.owo.com that does not resolve even from the SOA for that domain.

                        But it works for me behind pfsense for servers I put in - and worked before see way back in this thread

                        ;; OPT PSEUDOSECTION:
                        ; EDNS: version: 0, flags:; udp: 4096
                        ;; QUESTION SECTION:
                        ;shaggy.owo.com.                        IN      A

                        ;; AUTHORITY SECTION:
                        owo.com.                900    IN      SOA    ns-1494.awsdns-58.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 8                                                          6400

                        ;; Query time: 45 msec
                        ;; SERVER: 205.251.197.214#53(205.251.197.214)
                        ;; WHEN: Fri Oct 31 06:38:09 CDT 2014
                        ;; MSG SIZE  rcvd: 125

                        And it works currently for - see attached..  Polling whatever you put in there, and here is a sniff of what is on the wire, etc..

                        poll.png
                        poll.png_thumb
                        sniff.png
                        sniff.png_thumb

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                        1 Reply Last reply Reply Quote 0
                        • J
                          JacktheSmack
                          last edited by Apr 27, 2015, 9:55 AM

                          ISSUE RESOLVED

                          I inserted 2 new Network Interface Controllers for my router, that were suggested in another thread. They are the Intel PWLA8391GT. The UOtrace tool now works, and I get ping in Battlefield 4. I was also having unusual issues in GTA V, where some players couldn't join my session, so lets hope that's fixed too.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                            This community forum collects and processes your personal information.
                            consent.not_received