Allow or deny ICMP messages

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To allow or deny ICMP messages

  1. Open Routing and Remote Access.

  2. In the console tree, click NAT/Basic Firewall.


    • Routing and Remote Access/ServerName/IP Routing/NAT/Basic Firewall
  3. In the details pane, right-click the interface you want to configure, and then click Properties.

  4. Click the ICMP tab, and in Allow the following, do the following:

    • To allow a type of ICMP message to reach your network, select the appropriate check box.

    • To prevent a type of ICMP message from reaching your network, clear the appropriate check box.


  • To perform this procedure, you must be a member of the Administrators group. As a security best practice, consider using the Run As command rather than logging on with administrative credentials. If you have logged on with administrative credentials, you can also open Routing and Remote Access by clicking Start, clicking Control Panel, double-clicking Administrative Tools, and then double-clicking Routing and Remote Access. For more information, see Default local groups, Default groups, and Using Run as.

  • To display a description of a message type, click the message type. The description appears under Description.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also


Working with MMC console files
Internet Connection Sharing and network address translation
Understanding Network Address Translation
Network address translation design considerations
Deploying network address translation
Configure services and ports
Internet Control Message Protocol (ICMP)