Ping rules, put it at the bottom or at the top of the rules list ?
-
Hi,
When I have a connection issue, my internet provider needs to make troubleshooting with ping.
I have created a rule for this purpose, but I don't know if I should put it at the bottom or at the top of the rules list ? what is your opinion please?
Best Regards.
-
@elrick75
That doesn't matter. It want have any impact as long as your rules in an interface rule set don't match to the same traffic.So it's okay, when the rule is on the bottom.
-
@elrick75 said in Ping rules, put it at the bottom or at the top of the rules list ?:
but I don't know if I should put it at the bottom or at the top of the rules list
Rules are evaluated top down, first rule to trigger wins, no other rules are evaluated. So as @viragomann was saying as long as your rules don't have anything that conflicts say a block or a policy route that would trigger on your traffic it doesn't really matter.
Simple thing to do when you add a rule is walk down the rules from the top, will anything trigger that would do something with my traffic I don't want.. For example with ping, say if you wanted to allow IP xyz to ping but no other devices to ping, and you purpose put a block all icmp rule above your allow specific icmp rule. Then your specific icmp rule would never be seen, it would need to go above your block all icmp rule.
