Hi xnsys, It's true, that ping packets are allowed, if you enable "Gateway forwards trace route". It has technical reasons and is documented in the Onlinehelp: "Note – If enabled, the traceroute settings also allow ping packets, even if the corresponding ping settings are disabled." I'm not sure if I understand the problem with "Allow ICMP through Gateway from external networks". If you select and apply the option, you allow ICMP packets going through interfaces with default gateways. (the interface must be the incoming interface) If you don't select the option, you can't send ICMP packets through interfaces with default gateways. At least one of the following options must be enabled so that "Allow ICMP through Gateway from external networks" works: * Allow ICMP through gateway * Gateway forwards pings * Gateway forwards traceroute /Daniel
↧