Prema zadanim postavkama, Windows vatrozid s naprednom sigurnošću^{(Windows Firewall with Advanced Security)} blokira ICMP echo zahtjeve^{(ICMP Echo Requests)} ( pingove^(Pings) ) s mreže. U ovom ćemo vam postu pokazati kako dopustiti pingove (ICMP echo zahtjeve)^{(Pings (ICMP Echo requests))} putem vašeg Windows vatrozida^{(Windows Firewall)} pomoću naredbenog retka^{(Command Promp)} t ili putem Windows vatrozida s naprednim sigurnosnim sučeljem^{(Windows Firewall with Advanced Security UI)} .

Trebam li omogućiti ICMP?

Za mnoge mrežne administratore, Internet Control Message Protocol ( ICMP ) smatraju sigurnosnim rizikom i stoga kao sigurnosnu mjeru ICMP treba uvijek biti blokiran na vatrozidu. Koliko god je poznato da ICMP ima neke sigurnosne probleme povezane s njim, i upravo iz tog razloga, ^(ICMP)ICMP bi trebao biti blokiran; još uvijek nije razlog blokirati sav ICMP promet!

Koje ICMP vrste trebam dopustiti?

Osim tipa 3^{(Type 3)} i tipa 4^{(Type 4)} – jedinog bitnog ICMP prometa koji trebate dopustiti da ulazi i izlazi iz vašeg vatrozida na vašem Windows 10/11 PC-u, sve ostalo je opcionalno ili bi trebalo biti blokirano. Imajte^(Bear) na umu da za slanje ping zahtjeva morate dopustiti tip 8 OUT i tip 0 IN.

Dopustite pingove^(Pings) ( ICMP Echo zahtjevi) kroz Windows vatrozid^{(Windows Firewall)}

Općenito, način na koji naredba ping radi^{(ping command works)} među ostalim mrežnim alatima je jednostavno slanje posebnih paketa poznatih kao Internet Control Message Protocol ( ICMP ) echo zahtjeva^(Requests) ciljnom uređaju, a zatim čekanje da taj uređaj primatelj odgovori i pošalje natrag ICMP echo^{(ICMP Echo Reply)} Paket odgovora . Ova radnja pinga, osim testiranja je li mrežno povezan uređaj aktivan, također mjeri vrijeme odgovora i daje rezultat da ga pregledate.

Možemo dopustiti pingove^(Pings) ( ICMP Echo zahtjeve) putem vašeg vatrozida^(Firewall) na Windows 10 ili Windows 11 PC na bilo koji od dva načina. Istražit ćemo ovu temu prema metodama navedenim u nastavku kako slijedi.

Napomena^(Note) : ako imate sigurnosni softver treće strane s vlastitim vatrozidom instaliranim na vašem sustavu ili instaliran samo drugu vrstu namjenskog programa vatrozida treće strane, morat ćete otvoriti portove u tom vatrozidu^{(open ports in that firewall)} umjesto ugrađenog Windows vatrozida^{(Windows Firewall)} .

1] Dopustite pingove^{(Allow Pings)} ( ICMP Echo zahtjevi) kroz vatrozid^(Firewall) na Windows računalu^{(Windows PC)} putem Windows vatrozida^{(Windows Firewall)} s naprednim sigurnosnim sučeljem^{(Advanced Security UI)}

Da biste omogućili pingove^(Pings) ( ICMP Echo zahtjevi) kroz vatrozid^(Firewall) na Windows računalu^{(Windows PC)} putem Windows vatrozida^{(Windows Firewall)} s korisničkim sučeljem Advanced Security , učinite sljedeće:

• Kliknite Start^{(Click Start)} ili pritisnite tipku Windows na tipkovnici.
• Upišite Windows vatrozid^{(windows firewall)} , a zatim odaberite Windows Defender vatrozid^{(Windows Defender Firewall)}  s vrha rezultata pretraživanja.
• Kliknite vezu Napredne postavke^{(Advanced settings)} na lijevoj strani prozora upravljačke ploče^{(Control Panel)} koji se otvara.
• U lijevom oknu desnom tipkom miša kliknite Ulazna pravila^{(Inbound Rules)} i odaberite Novo pravilo^{(New Rule)} .
• U prozoru Novo ulazno pravilo^{(New Inbound Rule)} odaberite Prilagođeno^(Custom) .
• Kliknite Dalje^(Next) .
• U odjeljku Primjenjuje li se ovo pravilo na sve programe ili određene programe? ^{(Does this rule apply to all programs or specific programs?)}stranicu, provjerite je li radio gumb odabran za Svi programi^{(All programs)} .
• Kliknite Dalje^(Next) .
• Na koje se portove i protokol primjenjuje ovo pravilo? ^{(To which ports and protocol does this rule apply?)}stranicu, kliknite padajući izbornik Vrsta protokola i odaberite ^{(Protocol type)}ICMPv4 .
• Kliknite gumb Prilagodi .^(Customize)
• U prozoru Prilagodi ICMP postavke^{(Customize ICMP Settings)} odaberite opciju Specifične ICMP vrste^{(Specific ICMP types)} .
• Na popisu ICMP tipova omogućite Echo Request .
• Kliknite OK .
• Back on the To which ports and protocol does this rule apply? page, click Next.
• On the page that appears, select the radio button for Any IP address option for under the Which local IP addresses does this rule apply to? and Which remote IP addresses does this rule apply to? sections.

If you want, you can configure specific IP addresses to which your PC will respond to a ping request. Other ping requests are ignored.

• On the What action should be taken when a connection matches the specified conditions? page, make sure the radio button is selected for Allow the connection option.
• Click Next.
• Na stranici Kada se ovo pravilo primjenjuje^{(When does this rule apply)} , potvrdite/poništite izbor dostupnih opcija prema vašim zahtjevima.
• Kliknite Dalje^(Next) .
• Na završnom zaslonu morate svom novom pravilu dati ime i opcionalno dati opis. Preporuča se dodati ICMPv4 imenu pravila kako biste se razlikovali od ICMPv6 pravila koje ćete također kreirati.
• Kliknite gumb Završi .^(Finish)

Sada možete ići naprijed i stvoriti ICMPv6 pravilo ponavljanjem gornjih koraka, ali ovaj put u odjeljku Na koje se portove i protokol ovo pravilo primjenjuje? ^{(To which ports and protocol does this rule apply?)}stranicu, kliknite padajući izbornik Vrsta protokola^{(Protocol type)} i umjesto toga odaberite ICMPv6 .

• Izađite iz vatrozida Windows Defendera^{(Windows Defender Firewall)} kada završite.

Ako u bilo kojem trenutku želite onemogućiti pravilo, otvorite Windows vatrozid^{(Windows Firewall)} s naprednom sigurnosnom upravljačkom pločom^{(Advanced Security Control Panel)} , odaberite Ulazna pravila^{(Inbound Rules)} na lijevoj strani i pronađite pravila koja ste kreirali u srednjem oknu, desnom tipkom miša kliknite pravilo i odaberite Onemogući^(Disable) . Ova se pravila također mogu izbrisati – ali je najbolje da ih jednostavno onemogućite, tako da ih možete jednostavno i brzo ponovno omogućiti bez ponovnog stvaranja.

2] Dopustite pingove^{(Allow Pings)} ( ICMP echo zahtjevi) kroz vatrozid^(Firewall) na Windows računalu^{(Windows PC)} pomoću naredbenog retka^{(Command Prompt)}

Ovo je najbrži način za stvaranje iznimke za ping zahtjeve u Windows 11/10 .

Da biste dopustili Pingove^(Pings) ( ICMP Echo zahtjevi) kroz vatrozid^(Firewall) na Windows računalu^{(Windows PC)} pomoću naredbenog retka^{(Command Prompt)} , učinite sljedeće:

• Pritisnite tipku Windows key + R da biste pozvali dijaloški okvir Pokreni.
• U dijaloškom okviru Pokreni upišite cmd , a zatim pritisnite CTRL + SHIFT + ENTER da biste open Command Prompt in admin/elevated mode .
• U prozoru naredbenog retka upišite ili kopirajte i zalijepite naredbu u nastavku i pritisnite Enter da biste stvorili ICMPv4 iznimku^{(create the ICMPv4 exception)} .

netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow

• Da biste stvorili ICMPv6 iznimku^{(create the ICMPv6 exception)} , pokrenite naredbu u nastavku:

netsh advfirewall firewall add rule name="ICMP Allow incoming V6 echo request" protocol=icmpv6:8,any dir=in action=allow

Promjene stupaju na snagu odmah bez ponovnog pokretanja sustava.

• Da biste onemogućili ping zahtjeve za ICMPv4 iznimku^{(disable ping requests for the ICMPv4 exception)} , pokrenite naredbu u nastavku:

netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=block

• Da biste onemogućili ping zahtjeve za iznimku ICMPv6^{(disable ping requests for the ICMPv6 exception)} , pokrenite naredbu u nastavku:

netsh advfirewall firewall add rule name="ICMP Allow incoming V6 echo request" protocol=icmpv6:8,any dir=in action=block

Ako u bilo kojem trenutku želite onemogućiti pravilo, ali ste zaboravili naziv pravila, možete pokrenuti naredbu u nastavku da biste vidjeli popis svih pravila:

netsh advfirewall firewall show rule name=all

To je sve o tome kako dopustiti Pingove^(Pings) ( ICMP Echo zahtjevi) kroz Windows vatrozid^{(Windows Firewall)} !

Što je ICMP napad?

ICMP napad (također poznat kao Ping flood napad), uobičajen je napad uskraćivanja usluge (DoS)^{(Denial-of-Service (DoS) attack)} u kojem akter prijetnje zlonamjerno pokušava preplaviti ciljani uređaj ICMP eho zahtjevima (pingovima).

How to allow Pings (ICMP Echo requests) through Windows Firewall

By default, the Windows Firewall with Advanced Security blocks ICMP Echo Requests (Pings) from the network. In this post, we will show you how to allow Pings (ICMP Echo requests) through your Windows Firewall using Command Prompt or via the Windows Firewall with Advanced Security UI.

Should I enable ICMP?

For many network administrators, they consider the Internet Control Message Protocol (ICMP) a security risk, and therefore as a security measure, should have ICMP always be blocked at the firewall. In as much as ICMP is widely known to have some security issues associated with it, and for just that reason, ICMP should be blocked; it’s still no reason to block all ICMP traffic!

What ICMP types should I allow?

Apart from Type 3 and Type 4 – the only essential ICMP traffic you need to allow in and out of your firewall on your Windows 10/11 PC, everything else is either optional or should be blocked. Bear in mind that to send ping requests, you need to allow type 8 OUT and type 0 IN.

Allow Pings (ICMP Echo requests) through Windows Firewall

Generally, the way the ping command works amongst other network tools, is simply by sending special packets known as Internet Control Message Protocol (ICMP) Echo Requests to a target device, and then wait for that receiving device to respond and send back an ICMP Echo Reply packet. This action of pinging, apart from testing whether a network-connected device is active, it also measures the response time and outputs the result for you to review.

We can allow Pings (ICMP Echo requests) through your Firewall on Windows 10 or Windows 11 PC in either of two ways. We’ll explore this topic under the methods outlined below as follows.

Note: If you have a third-party security software with its own firewall installed on your system or just another type of dedicated third-party firewall program installed, you’ll need to open ports in that firewall instead of the in-built Windows Firewall.

1] Allow Pings (ICMP Echo requests) through Firewall on Windows PC via Windows Firewall with Advanced Security UI

To allow Pings (ICMP Echo requests) through Firewall on Windows PC via Windows Firewall with Advanced Security user interface, do the following:

• Click Start or press the Windows key on the keyboard.
• Type windows firewall, and then select Windows Defender Firewall from the top of the search result.
• Click the Advanced settings link on the left side of the Control Panel window that opens.
• In the left pane, right-click Inbound Rules and choose New Rule.
• In the New Inbound Rule window, select Custom.
• Click Next.
• On the Does this rule apply to all programs or specific programs? page, make sure the radio button is selected for All programs.
• Click Next.
• On the To which ports and protocol does this rule apply? page, click the Protocol type drop-down, and select ICMPv4.
• Click the Customize button.
• In the Customize ICMP Settings window, select the Specific ICMP types option.
• In the list of ICMP types, enable Echo Request.
• Click OK.
• Back on the To which ports and protocol does this rule apply? page, click Next.
• On the page that appears, select the radio button for Any IP address option for under the Which local IP addresses does this rule apply to? and Which remote IP addresses does this rule apply to? sections.

If you want, you can configure specific IP addresses to which your PC will respond to a ping request. Other ping requests are ignored.

• On the What action should be taken when a connection matches the specified conditions? page, make sure the radio button is selected for Allow the connection option.
• Click Next.
• On the When does this rule apply page, check/uncheck the available options per your requirement.
• Click Next.
• At the final screen, you need to give your new rule a name, and optionally provide a description. It’s recommended to add ICMPv4 to the rule name to differentiate from the ICMPv6 rule that you will create also.
• Click the Finish button.

Now, you can go ahead and create the ICMPv6 rule by repeating the steps above, but this time at the To which ports and protocol does this rule apply? page, click the Protocol type drop-down, and select ICMPv6 instead.

• Exit Windows Defender Firewall when done.

If at anytime you want to disable the rule, open Windows Firewall with Advanced Security Control Panel, select Inbound Rules on the left, and locate the rules you created in the middle pane, right-click the rule and choose Disable. These rules can also be deleted – but it’s best just disabling the rules instead, so you can easily and quickly re-enable them without recreating them.

2] Allow Pings (ICMP Echo requests) through Firewall on Windows PC using Command Prompt

This is the fastest way to create an exception for ping requests on Windows 11/10.

To allow Pings (ICMP Echo requests) through Firewall on Windows PC using Command Prompt, do the following:

• Press Windows key + R to invoke the Run dialog.
• In the Run dialog box, type cmd and then press CTRL + SHIFT + ENTER to open Command Prompt in admin/elevated mode.
• In the command prompt window, type or copy and paste the command below and hit Enter to create the ICMPv4 exception.

netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow

• To create the ICMPv6 exception, run the command below:

netsh advfirewall firewall add rule name="ICMP Allow incoming V6 echo request" protocol=icmpv6:8,any dir=in action=allow

Changes takes effect immediately without system reboot.

• To disable ping requests for the ICMPv4 exception, run the command below:

netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=block

• To disable ping requests for the ICMPv6 exception, run the command below:

netsh advfirewall firewall add rule name="ICMP Allow incoming V6 echo request" protocol=icmpv6:8,any dir=in action=block

If at anytime you want to disable a rule but have forgotten the name of the rule, you can run the command below to see a list of all rules:

netsh advfirewall firewall show rule name=all

That’s it on how to allow Pings (ICMP Echo requests) through Windows Firewall!

What is ICMP attack?

An ICMP attack (also referred to as a Ping flood attack), is a common Denial-of-Service (DoS) attack in which a threat actor maliciously attempts to overwhelm a targeted device with ICMP echo-requests (pings).

Related posts

• Windows Firewall is preventing or blocking connections to your computer

• Kako vratiti ili resetirati postavke Windows vatrozida na zadane vrijednosti

• Kako koristiti naredbu Netsh za upravljanje Windows vatrozidom

• Kako blokirati ili otvoriti port u Windows vatrozidu

• Windows vatrozid ne prepoznaje mrežu domene u sustavu Windows 10

• Mac vatrozid: kako ga omogućiti i konfigurirati

• Usluga Windows vatrozida ne pokreće se u sustavu Windows 11/10

• Dijelite datoteke s bilo kim pomoću Send Anywhere za Windows PC

• Kako blokirati ili deblokirati programe u vatrozidu Windows Defender

• Windows vatrozid ne može promijeniti neke od vaših postavki

• Blokirajte aplikacijama i igrama pristup internetu pomoću vatrozida Windows Defender

• Uključite ili isključite obavijesti vatrozida za Windows u sustavu Windows 11/10

• Kako urediti popis dopuštenih aplikacija u vatrozidu Windows Defender (i blokirati druge)

• Kako konfigurirati i postaviti postavke vatrozida rutera

• Kako onemogućiti vatrozid za Windows 10

• Kako popraviti Echo u slušalicama u sustavu Windows 11/10

• Prilagodite pravila i postavke vatrozida za Windows 10

• Popravak Ne mogu uključiti Windows Firewall Kôd pogreške 0x80070422

• PrivateWin10 je napredni alat za privatnost sustava Windows 10

• Kako konfigurirati Windows vatrozid u sustavu Windows 11/10