Ping and Traceroute

Install the firewalld service, then override the default-deny firewall configurations to allow ping (echo-request) or other diagnostic traceroute traffic.

Requirements

firewalld

Default Variables

The options for types of allowed ICMP are dictated by the firewalld service.

# firewall-cmd --get-icmptypes
destination-unreachable echo-reply echo-request parameter-problem redirect router-advertisement router-solicitation source-quench time-exceeded timestamp-reply timestamp-request

The ping_zone is where the firewalld rules will update to modify ICMP access.

Role Defaults

ping_enable: yes
ping_source: 0.0.0.0/0
ping_types:
- echo-request
ping_zone: public

Dependencies

None.

Example Playbook

- hosts: all:!platform_windows
  roles:
    - deekayen.ping