Dialog Box: Customize ICMP Settings
Updated: January 20, 2009
Applies To: Windows 7, Windows Server 2008 R2
Use this dialog box when creating or modifying a firewall rule to configure criteria based on Internet Control Message Protocol (ICMP).
How to get to this dialog box
When creating a new firewall rule using the wizard, follow these steps:
On the Rule Type page, select Custom.
On the Protocol and Ports page, in Protocol type, select either ICMPv4 or ICMPv6.
When modifying an existing firewall rule using the Firewall Rule Properties dialog box, follow these steps:
Click the Protocols and Ports tab.
In Protocol type, select either ICMPv4 or ICMPv6.
All ICMP types
Select this option to specify that any message using ICMP matches the rule.
Specific ICMP types
Select this option to select one or more ICMP message types. Select the message types to which you want to apply the rule.
This ICMP type
Use this option to specify an ICMP message type that is not provided in Specific ICMP types. This option is enabled only if you select Specific ICMP types. Click Add to add the type to the list.
This is a number that correlates to an ICMP message type. For example, 3 is the number for the "Destination Unreachable" message. The message type is an integer from 0 to 255.
This is a number that correlates to a code for an ICMP message type. These codes are details that are useful for troubleshooting and understanding the circumstances that prompted the sending of the message. The same code number can mean different things for different message types. For example, 3 is the code for "Port Unreachable" for the "Destination Unreachable" message, but it is also the code for "Redirect Datagram for the Type of Service and Host" for the "Redirect" message type.
The code can be an integer from 0 to 255, or the value Any.
By combining the message type and code, you can specify very detailed criteria for the exception. This can be useful when you need to make sure specified ICMP messages pass through Windows Firewall with Advanced Security for remote troubleshooting, while other ICMP messages are blocked.