WAN ICMP from specific IP addresses?

[lindend]

I know there's a blanket option to enable ICMP responses on the WAN but is there an easy way to allow WAN ICMP responses from specific IP addresses rather than responding to all incoming pings? If not, is iptables the next option?

 

[lindend]

Bump....any suggestions?

 

[ColinTaylor]

I would create a /jffs/scripts/firewall-start script as follows:

#!/bin/sh

logger -t $(basename $0) $1

iptables -I INPUT -p icmp -s 123.123.123.123 -j ACCEPT

where 123.123.123.123 is your allowed IP address. Then turn off "Respond Ping Request from WAN" in the web interface.

 

[lindend]

Thanks Colin, this worked nicely.

 

[peraburek]

is it possible to create WAN ICMP respond script for dynamic IP (dyndns for example)

iptables -I INPUT -p icmp -s my-hostname.dyndns.org -j ACCEPT

would this work, or is there some workaround to make it work?

what does this line do (I guess it logs something, but what, and where?)
logger -t $(basename $0) $1