Firewalling Issue

[hazly92]

Hi All,

I face some problem here. my network as attached 1.jpg, the problem is I can ping through site A from site B using public ip but I cant ping from site A to site B. If I enable one rule as shown on attached 2.jpg, it works. But I cannot allow to open all ports. Please advise. :) thanks in advance~.

[Birke]

if you only want to allow ping, then make a rule with only ping:
protocol=icmp, icmp-subtypes=echo request/reply, source=site a, destination=site b.

[hazly92]

silly me, I forgot to change the protocol to any since I need to temporarily open all ports.