<![CDATA[ICMP to internet addresses]]>Hello everyone,
I'm testing pfsense in a virtual lab.
I have 3 LAN interfaces, in one of them I configured http and https traffic interception for virus scanning. everything works fine (using squid)
My question is how do I allow ICMP traffic to internet addreses only.

Thanks

]]>https://forum.netgate.com/topic/142151/icmp-to-internet-addressesRSS for NodeFri, 10 Apr 2026 11:51:57 GMTTue, 02 Apr 2019 03:21:15 GMT60<![CDATA[Reply to ICMP to internet addresses on Tue, 02 Apr 2019 09:44:25 GMT]]>@viragomann brilliant!!
Thanks! It works!

]]>https://forum.netgate.com/post/834529https://forum.netgate.com/post/834529Tue, 02 Apr 2019 09:44:25 GMT<![CDATA[Reply to ICMP to internet addresses on Tue, 02 Apr 2019 07:48:50 GMT]]>Define an RFC 1918 alias in Firewall > Aliases. Add all private network ranges to it.
Then add a pass filter rule, select ICMP protocol, at destination check „Invert“, „single host or alias“ and enter the RFC 1918 alias.

Consider that this works only if you have restricted access rules, so that ICMP is not allowed by ofher rules.

]]>https://forum.netgate.com/post/834509https://forum.netgate.com/post/834509Tue, 02 Apr 2019 07:48:50 GMT