Share via

Dialog Box: Customize ICMP Settings

  • Article

Updated: January 20, 2009

Applies To: Windows 7, Windows Server 2008 R2

Use this dialog box when creating or modifying a firewall rule to configure criteria based on Internet Control Message Protocol (ICMP).

How to get to this dialog box

  • When creating a new firewall rule using the wizard, follow these steps:

    1. On the Rule Type page, select Custom.

    2. On the Protocol and Ports page, in Protocol type, select either ICMPv4 or ICMPv6.

    3. Click Customize.

  • When modifying an existing firewall rule using the Firewall Rule Properties dialog box, follow these steps:

    1. Click the Protocols and Ports tab.

    2. In Protocol type, select either ICMPv4 or ICMPv6.

    3. Click Customize.

All ICMP types

Select this option to specify that any message using ICMP matches the rule.

Specific ICMP types

Select this option to select one or more ICMP message types. Select the message types to which you want to apply the rule.

This ICMP type

Use this option to specify an ICMP message type that is not provided in Specific ICMP types. This option is enabled only if you select Specific ICMP types. Click Add to add the type to the list.

Type

This is a number that correlates to an ICMP message type. For example, 3 is the number for the "Destination Unreachable" message. The message type is an integer from 0 to 255.

Code

This is a number that correlates to a code for an ICMP message type. These codes are details that are useful for troubleshooting and understanding the circumstances that prompted the sending of the message. The same code number can mean different things for different message types. For example, 3 is the code for "Port Unreachable" for the "Destination Unreachable" message, but it is also the code for "Redirect Datagram for the Type of Service and Host" for the "Redirect" message type.

The code can be an integer from 0 to 255, or the value Any.

By combining the message type and code, you can specify very detailed criteria for the exception. This can be useful when you need to make sure specified ICMP messages pass through Windows Firewall with Advanced Security for remote troubleshooting, while other ICMP messages are blocked.