[USG Flex 100H] - PPPoE over VLAN - External ICMP request not blocked

Maverick87

Hi @PeterUK ,

in this situation the PING is denied

When I switch the position between both, the ping is allowed.

I think I'm wrong at this point.
I've always tried pinging the WAN IP from the LAN and never actually from outside.
Actually, perhaps according to the basic LAN-to-Zywall rule, I think that it's correct that I can ping the WAN address from the LAN.
The real test should be done without the rule and actually from an outside location.

Maverick87

Hi @PeterUK ,

I've disabled the rule and I've tried with an external wireless connection using phone tethering…
The PING is denied, and when I allow the "default" rule, the PING packet passed and starting to ping. If I deny again the "default" rule, the PING goes in timeout.

So definitely… from internal network I can ping always my external WAN IP, but from a real external network I cannot ping my WAN interface because hint the "default" rule that is denied by default.