blocking ip not working?

[xGara 0]

Hello,

I went to the tutorial on the eset website to block ips. But i still can ping some of them.

So I did Eset > Configuration > Network > Configure Rules and Zones > New 

 

 

Name: Block CS GO MM Server

Direction : both

Action : Refuse

Protocol : TCP & UDP

 

Distant Adress, I put this.

85.25.183.0-185.25.183.255

146.66.156.0-146.66.156.255,

146.66.157.0-146.66.157.255,

185.25.180.0-185.25.180.255,

185.25.181.0-185.25.181.255,

146.66.155.0-146.66.155.255,

185.25.182.0-185.25.182.255

208.78.164.0-208.78.164.255,

208.78.165.0-208.78.165.255,

208.78.166.0-208.78.166.255

192.69.96.0-192.69.96.255,

192.69.97.0-192.69.97.255

103.28.54.0-103.28.54.255,

103.28.55.0-103.28.55.255,

103.10.124.0-103.10.124.255

152.111.192.0-152.111.192.255,

197.80.200.0-197.80.200.255,

196.38.180.0-196.38.180.255

103.10.125.0-103.10.125.255

209.197.29.0-209.197.29.255,

209.197.25.0-209.197.25.255,

205.185.194.0-205.185.194.255

180.149.41.0-180.149.41.255

 

Then OK, Apply and OK

 

But i can still ping these servers and connect to them.. Why?!

 

cmd > ping 185.25.183.11

 

Answer from 185.25.183.11 : octets=32 time=147ms TTL=114

Answer from 185.25.183.11 : octets=32 time=147ms TTL=114

Answer from 185.25.183.11 : octets=32 time=147ms TTL=114

Answer from 185.25.183.11 : octets=32 time=147ms TTL=114

 

How is that possible?

[Marcos 5,250]

I've tested it and it worked. The best would be to contact customer care and provide them with your ESS configuation so that they can test it with your settings as I assume the issue occurs due to misconfiguration.

[rugk 397]

Ping uses the ICMP protocol for the connection check. But you have selected to block the protocols "TCP & UDP", so you have to select ICMP to block a "normal" IPv4 address or IPv6-ICMP to block an IPv6 IP address.

Edited November 19, 2014 by rugk

[Marcos 5,250]

Rugk is right, I overlooked it as I assumed it was clear that a rule must be created for ICMP protocol