Ping to 1530 GW from internal net dropped

[G_W_Albrecht]

Customer has a 1530 SMB appliance in Strict policy mode. He uses a manual rule to enable ping to the GW from internal nets. In firmware R80.20.05 (992001134) this works as expected, but in R80.20.10 (992001491) (and maybe since R80.20.05 (992001208)), ping is dropped by the cleanup rule.

Question now is with R&D : Is this a Bug or just a new Design ?

[PhoneBoy]

My guess is it’s a bug of some sort.
What does fw ctl zdebug drop say?

[G_W_Albrecht]

We did not need to ask fw ctl zdebug drop - according to the logs, ping is dropped by the cleanup rule. The rule not working is:

If you substitute the GW object by the GW IP it will match...

[G_W_Albrecht · Accepted solution]

No bug - R&D answered:

Well, for now this is new design. Please use IP based rules for such scenarios.