Allow ICMP but answer from server

Operations · May 4, 2023, 5:46 PM

I have got an IPV4 /29 block and my ISP external address. I have allowed ICMP (ping) so i can check if server is running (with a source address) but when i ping an external address my PfSense replies (even if server is down, it replies)

How can i change the rule so that the ping request ends up on the correct server?

I have got an allow ICMP rule on the floating firewall.

viragomann · May 4, 2023, 6:02 PM

@operations
You have to forward ICMP requests to the internal server IP.

Operations · May 4, 2023, 6:07 PM

@viragomann i get that, but why is my PfSense answering now? I don't get that.

viragomann · May 4, 2023, 6:46 PM

@operations
If the packets are forwarded pfSense shouldn't reply itself.
The pass rule has to have the internal server IP as destination then.