topic Re: Ping out problems. in Network Security https://community.cisco.com/t5/network-security/ping-out-problems/m-p/676863#M1024570 <HTML><HEAD></HEAD><BODY><P>You can restrict ICMP even further if you only allow inbound echo replies instead of all inbound ICMP. This will prevent attackers from gleaning information using pings to your public range.</P><P></P><P></P></BODY></HTML> Thu, 01 Mar 2007 16:36:43 GMT jwalker 2007-03-01T16:36:43Z Ping out problems. https://community.cisco.com/t5/network-security/ping-out-problems/m-p/676861#M1024566 <P>I would be grateful if anyone can enlighten me with regards to what I am doing wrong in setting up my asas5510. I?m unable to ping out to the Internet from my DMZ or from the inside out to the internet. I can ping devices on the inside and I can ping from inside to devices in the DMZ. I?m also like to place my DNS server in the DMZ and unclear on DNS rewrites works or what needs to done to lace a dns server in the dmz .</P><P>Thanks</P><P></P><P></P><P> </P><P></P> Mon, 11 Mar 2019 09:39:54 GMT https://community.cisco.com/t5/network-security/ping-out-problems/m-p/676861#M1024566 rschoon 2019-03-11T09:39:54Z Re: Ping out problems. https://community.cisco.com/t5/network-security/ping-out-problems/m-p/676862#M1024568 <HTML><HEAD></HEAD><BODY><P>Add another access-list </P><P>access-list outside_access_in extended permit icmp any x.x.x.x y.y.y.y</P><P></P><P>For ICMP alone you need to specify an acceslist on the outside interface to allow replies to come back...</P><P></P><P>HTH</P><P>Hoogen</P><P></P><P>Do rate if this helped <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> </P></BODY></HTML> Thu, 01 Mar 2007 08:55:34 GMT https://community.cisco.com/t5/network-security/ping-out-problems/m-p/676862#M1024568 hoogen_82 2007-03-01T08:55:34Z Re: Ping out problems. https://community.cisco.com/t5/network-security/ping-out-problems/m-p/676863#M1024570 <HTML><HEAD></HEAD><BODY><P>You can restrict ICMP even further if you only allow inbound echo replies instead of all inbound ICMP. This will prevent attackers from gleaning information using pings to your public range.</P><P></P><P></P></BODY></HTML> Thu, 01 Mar 2007 16:36:43 GMT https://community.cisco.com/t5/network-security/ping-out-problems/m-p/676863#M1024570 jwalker 2007-03-01T16:36:43Z