# Icmp port unreachable **URL:** \ **Category:** Router\ **Created:** [January 25, 2019, 11:33pm UTC](https://forum.gl-inet.com/t/icmp-port-unreachable/5845 "2019-01-25T23:33:27Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![sukefixewe](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/e274bd/32.png) [@sukefixewe](https://forum.gl-inet.com/u/sukefixewe)\ **Post date:** [January 25, 2019, 11:33pm UTC](https://forum.gl-inet.com/t/icmp-port-unreachable/5845/1 "2019-01-25T23:33:27Z")
After reading some similar pages I have to ask. `ping google.com` on the router (gl inet) works (ssh’ed), while on my laptop it returns `Destination port unreachable`. Here’s my /etc/config/firewall: ```auto config defaults option syn_flood '1' option input 'ACCEPT' option output 'ACCEPT' option forward 'REJECT' config zone option name 'lan' list network 'lan' option input 'ACCEPT' option output 'ACCEPT' option forward 'ACCEPT' config zone option name 'wan' option input 'REJECT' option output 'ACCEPT' option forward 'REJECT' option masq '1' option mtu_fix '1' option network 'wan wan6 wwan' config forwarding option src 'lan' option dest 'wan' config rule option name 'Allow-DHCP-Renew' option src 'wan' option proto 'udp' option dest_port '68' option target 'ACCEPT' option family 'ipv4' config rule option name 'Allow-Ping' option src 'wan' option proto 'icmp' option icmp_type 'echo-request' option family 'ipv4' option target 'ACCEPT' config rule option name 'Allow-IGMP' option src 'wan' option proto 'igmp' option family 'ipv4' option target 'ACCEPT' config rule option name 'Allow-DHCPv6' option src 'wan' option proto 'udp' option src_ip 'fc00::/6' option dest_ip 'fc00::/6' option dest_port '546' option family 'ipv6' option target 'ACCEPT' config rule option name 'Allow-MLD' option src 'wan' option proto 'icmp' option src_ip 'fe80::/10' list icmp_type '130/0' list icmp_type '131/0' list icmp_type '132/0' list icmp_type '143/0' option family 'ipv6' option target 'ACCEPT' config rule option name 'Allow-ICMPv6-Input' option src 'wan' option proto 'icmp' list icmp_type 'echo-request' list icmp_type 'echo-reply' list icmp_type 'destination-unreachable' list icmp_type 'packet-too-big' list icmp_type 'time-exceeded' list icmp_type 'bad-header' list icmp_type 'unknown-header-type' list icmp_type 'router-solicitation' list icmp_type 'neighbour-solicitation' list icmp_type 'router-advertisement' list icmp_type 'neighbour-advertisement' option limit '1000/sec' option family 'ipv6' option target 'ACCEPT' config rule option name 'Allow-ICMPv6-Forward' option src 'wan' option dest '*' option proto 'icmp' list icmp_type 'echo-request' list icmp_type 'echo-reply' list icmp_type 'destination-unreachable' list icmp_type 'packet-too-big' list icmp_type 'time-exceeded' list icmp_type 'bad-header' list icmp_type 'unknown-header-type' option limit '1000/sec' option family 'ipv6' option target 'ACCEPT' config rule option name 'Allow-IPSec-ESP' option src 'wan' option dest 'lan' option proto 'esp' option target 'ACCEPT' config rule option name 'Allow-ISAKMP' option src 'wan' option dest 'lan' option dest_port '500' option proto 'udp' option target 'ACCEPT' config include option path '/etc/firewall.user' config include 'miniupnpd' option type 'script' option path '/usr/share/miniupnpd/firewall.include' option family 'any' option reload '1' config include 'shadowsocks' option type 'script' option path '/var/etc/shadowsocks.include' option reload '1' config rule 'glservice_rule' option name 'glservice' option dest_port '83' option proto 'tcp udp' option src 'wan' option target 'ACCEPT' option enabled '0' ``` and /etc/config/network: ```auto config interface 'loopback' option ifname 'lo' option proto 'static' option ipaddr '127.0.0.1' option netmask '255.0.0.0' config globals 'globals' option ula_prefix fd08:04a4:9ecd:4c02::/48' config interface 'lan' option type 'bridge' option ifname 'eth1' option proto 'static' option netmask '255.255.255.0' option ip6assign '60' option hostname 'gl' option ipaddr '192.168.8.1' config interface 'wan' option ifname 'eth0' option proto 'dhcp' option hostname 'gl' option metric '10' option peerdns '0' option custom_dns '1' option dns '8.8.8.8 8.8.4.4' config interface 'wan6' option ifname 'eth0' option proto 'dhcpv6' config interface 'wwan' option proto 'dhcp' option metric '20' option peerdns '0' option dns '8.8.8.8 8.8.4.4' ``` finally /etc/firewall.user: ```auto iptables -I INPUT -p tcp --dport 22 -s 192.168.8.0/24 -j ACCEPT iptables -I INPUT -p tcp --dport 22 ! -s 192.168.8.0/24 -j DROP ``` Any help appreciated. Thank you. ---
**Author:** ![kyson-lok](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/kyson-lok/32/185_2.png) [@kyson-lok](https://forum.gl-inet.com/u/kyson-lok)\ **Post date:** [January 28, 2019, 1:50am UTC](https://forum.gl-inet.com/t/icmp-port-unreachable/5845/2 "2019-01-28T01:50:37Z")
What did you operate before? ---
**Author:** ![sukefixewe](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/e274bd/32.png) [@sukefixewe](https://forum.gl-inet.com/u/sukefixewe)\ **Post date:** [January 29, 2019, 11:22pm UTC](https://forum.gl-inet.com/t/icmp-port-unreachable/5845/3 "2019-01-29T23:22:09Z")
I don’t understand; what do you mean? ---
**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\ **Post date:** [January 30, 2019, 10:10am UTC](https://forum.gl-inet.com/t/icmp-port-unreachable/5845/4 "2019-01-30T10:10:27Z")
Kyson is asking what did you do before this happen. ---
**Author:** ![sukefixewe](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/e274bd/32.png) [@sukefixewe](https://forum.gl-inet.com/u/sukefixewe)\ **Post date:** [February 1, 2019, 11:36pm UTC](https://forum.gl-inet.com/t/icmp-port-unreachable/5845/5 "2019-02-01T23:36:22Z")
Nothing, this was on the stock firmware (just bought the device) ---
**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\ **Post date:** [February 2, 2019, 3:11am UTC](https://forum.gl-inet.com/t/icmp-port-unreachable/5845/6 "2019-02-02T03:11:38Z")
from what you have posted, you have at least set up WISP. So we need to know what you have set. So please just describe the details of what you have done. You also didn’t say what models you are using. ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 29, 2025, 2:57am UTC](https://forum.gl-inet.com/t/icmp-port-unreachable/5845/7 "2025-10-29T02:57:49Z")