Block LAN from pinging (ICMP) the gateway

  • Hello everybody,
    I have a problem and do not know how to solve it…
    I have A LAN interface with subnet where is the LAN interface IP "the pfsense sserver IP". I want to block PINGING to from subnet I have tried those rules but noway even LOG does not report any pinging.

    Firewall: Rules

    Proto Source Port Destination Port Gateway Schedule Description

    Block ICMP * * * *

    Block ICMP LAN net * LAN address * *

    Block ICMP * * *

    Block         ICMP * * *

    I do nt understand why it doesnt block or even log this ??? any solutions??? explanations???
    Thank you

  • There is a hidden firewall rule in pfsense with higher priority than any rule you create, allowing access to the LAN IP from the LAN subnet. If you want to override this you have to check the box on the "System: Advanced functions" page that says "Disable webGUI anti-lockout rule".

    You should use this feature with great caution, as you will now be free to prevent yourself access to the GUI (you will still have access to the serial console, although you can password protect that too).

  • Action: Reject,Source: Any, Destination : Any , Port: ICMP
    Hope this help.


Log in to reply