1

I am currently trying to set up a server off of my Windows 10 PC, after lots of troubleshooting I have concluded that my router is blocking ICMP Echo requests (AKA Ping) from reaching my computer. This results in anyone outside of the network to get a "Session Timed Out" error when pinging my IP in CMND Prompt. I don't see any way to allow these requests on my router, at least not through the Spectrum app. I hear that NAT routers have issues with this via a firewall, any ideas on how to allow them? My router is an Askey SAC2V1K

I've been at this for weeks and finally decided to go to the forums, so thanks in advance!

Improve this question
3
  • 2
    Why do you want random people to have the capability to ping you? Being able to ping you and having an accessible service on a port are two entirely different things
    – Ramhound
    Commented Apr 19, 2021 at 22:06
  • 2
    Ping is probably not what you actually need or want. What is the actual problem you are trying to solve?
    – Mokubai ♦
    Commented Apr 19, 2021 at 22:10
  • So what you want to do is setup your server service, add a port forwarding rule for the port you wish externals to access (and a corresponding firewall rule i the router doesn't set one automatically when port forwarding, and then use tools like canyouseeme.org or a similar online port testing tool that is outside your LAN. you will not be able to test the port forwarding from inside your network, unless your router supports hairpinning, and I'm almost certain it doesn't. ICMP Ping works at the IP layer, but NAT messes with that, so you have to test at the TCP/UDP port level.
    – Frank Thomas
    Commented Apr 19, 2021 at 22:44

2 Answers 2

Reset to default
2

Users outside of your home LAN shouldn't be trying to ping the non-routable private IP address of a server on your LAN. If they need to ping you, the only publicly accessible address they can ping is the one on the WAN port of your NAT gateway router.

So make sure they're pinging the right address, and make sure your NAT gateway router is configured to respond to pings on its WAN port.

Improve this answer
2

This is pretty much a standard feature of a firewall router. More specifically it is a feature of any kind of firewall.

If you want this machine to be accessible you have two options.

  1. In your router configuration you should be able to forward external ports to an internal machine. This is done with an external port being opened and forwarded to a specific internal IP and port. This is the normal "I want to make a server on a computer available at my router IP:port address".
    You essentially give specific programs the ability to be a server on your Internet IP.
  2. Your router may have a "DMZ" setting. This is the nuclear approach and is only recommended when you 100% trust that the machine you are putting in DMZ has no security vulnerabilities. All packets from your Internet connection that are not already destined for specific machines on your network will get forwarded to the DMZ machine.
    This is dangerous if the machine is running known insecure services. I would not have a Windows XP server in the DMZ due to various networking related vulnerabilities.

For the most part ICMP ping is a red herring. You shouldn't need to care about it and option 1 should be your preferred method.

If you have a game server then you should simply forward the relevant external port to the machine and port hosting the server. Most games will let you specify both an IP and port to connect to from outside your network, and if they require your machine to be available via ICMP ping as well then the game designers were insane and have somehow completely missed the last 20 years of consumer Internet connections completely blocking public ICMP pings.

99% of the time simple per application port forwarding rules should suffice. If you need ping as well then you need to look carefully at why the application needs that. Chances are it doesn't. It almost certainly shouldn't. Ping is only for "is someone there" messages, you can still have other ports open and with two way communication even with pings blocked.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .