When creating custom access rules, one can limit traffic to certain ports/services, like: [code]"access_to.0": "+ROUTE:10.0.0.0/24:https,tcp80" [/code] But it seems that putting any port restrictions on an access rule automatically blocks ICMP. Is there any way to explicitly allow ICMP? (I tried adding icmp to the list of port/services)

Including ICMP in access restrictions

chort1

When creating custom access rules, one can limit traffic to certain ports/services, like:

"access_to.0": "+ROUTE:10.0.0.0/24:https,tcp80"

But it seems that putting any port restrictions on an access rule automatically blocks ICMP. Is there any way to explicitly allow ICMP?
(I tried adding icmp to the list of port/services)

openvpn_inc

Hello chort1,

I believe the name to use is icmp-echo-request (taken from the tooltip that shows up in allow access to section in group permissions).

Kind regards,
Johan

chort1

Oh, nice! I did not notice that tooltip. (Almost never use the GUI). I'll try it out.

By the way, is there any documentation that shows the supported ports/protocols/services?

chort1

As a follow-up to this, is there any way to specify a range of ports in the access_to rules? Like tcp/5000-5100, or something similar?

openvpn_inc

Hello,

Yeah what you mentioned should work. Works here when I just tried it.

Kind regards,
Johan