Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →To make an external ping reach your VPS, allow inbound ICMP (for IPv4) or ICMPv6 (for IPv6) in both places that can filter traffic: the VPS provider’s cloud firewall or security group and the firewall inside the guest operating system. A public IP address does not bypass either deny rule.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
Ping has no TCP or UDP port to open. You must select the ICMP protocol, restrict the rule to the monitor or administrator’s public CIDR where possible, then test from a network that is genuinely outside the provider’s private network.
As an Amazon Associate I earn from qualifying purchases.
How the packet reaches your VPS
An echo request can be discarded before Linux ever sees it. The path normally has at least two independent policy layers:
- Provider layer: a VPC firewall, network ACL, or security-group rule decides whether traffic addressed to the VPS is delivered to its virtual network interface.
- Guest layer: nftables, iptables, UFW, firewalld, or another host firewall decides whether the operating system accepts the request and sends an echo reply.
Both layers must allow the same address family and source range. Allowing ICMP in the guest while the provider firewall drops it produces a timeout; allowing it at the provider while a host-level drop rule remains in place produces the same symptom.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
IPv4 and IPv6 are separate rules
For IPv4, choose ICMP protocol number 1. For IPv6, choose ICMPv6 protocol number 58. Cloud consoles commonly present separate protocol and source-range fields for the two families. An IPv4 rule does not make an IPv6 address respond, and an IPv6 rule does not make an IPv4 address respond.
There is no ping port
Do not create a rule for TCP 22, UDP 53, or any other destination port to enable ping. Echo request and echo reply are ICMP message types. In nftables, the relevant match is icmp type echo-request for IPv4 and icmpv6 type echo-request for IPv6.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Prepare the source and destination details
Before editing a rule, write down the public address you will test and the source address that should be permitted. A monitoring service may publish one or more fixed CIDR ranges; an office or home connection may have one address today and a different address after the ISP changes it.
- Destination: the VPS’s actual public IPv4 address, public IPv6 address, or both.
- Source: the external tester’s public address or the smallest CIDR that contains all approved testers.
- Address family: use an IPv4 source and destination together, or an IPv6 source and destination together.
- Target: the exact VPS, network tag, interface, or security group to which the provider rule applies.
To discover what address a test host is using, check the address shown by the monitoring platform or an IP-discovery service from that host. Do not assume that the private address shown by an operating-system command is the source seen by the cloud firewall; NAT can replace it with the router’s public address.
Add the provider firewall or security-group rule
Create an ingress allow rule. Select ICMP rather than TCP or UDP, set the source to the tester’s public CIDR, and target only the VPS or its intended group. If your provider has an explicit IPv6 option, create a second rule for ICMPv6 and the approved IPv6 source range.
Google Cloud
Google Cloud’s firewall documentation describes an ingress rule that permits ICMP and supports separate IPv4 and IPv6 source ranges. The documented command pattern includes --direction=INGRESS, --action=ALLOW, --rules=icmp, and --source-ranges=.... A narrowly scoped example is:
Recommended Free Tools
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
gcloud compute firewall-rules create allow-icmp-from-monitor
--direction=INGRESS
--action=ALLOW
--rules=icmp
--source-ranges=203.0.113.44/32203.0.113.44/32 is an example single-host CIDR; replace it with the tester’s real public address. Select the correct VPC network and, if your design uses them, target tags or service accounts so the rule reaches the intended VPS and not every instance. Google’s default network is documented as having a default-allow-icmp rule, but custom networks and edited defaults may not. Verify the effective rules attached to the instance rather than relying on a rule name.
For IPv6, use the provider console or command form that specifies ICMPv6 and an IPv6 source range. Google documents IPv4 and IPv6 source ranges as distinct controls; an IPv4 0.0.0.0/0 source does not cover IPv6. The broad IPv4 range allows every IPv4 source, so it should be used only when that exposure is intentional.
OpenStack
OpenStack security groups deny unmatched inbound traffic by default. The documented way to allow ping is:
openstack security group rule create --protocol icmp SECURITY_GROUPReplace SECURITY_GROUP with the group attached to the VPS. OpenStack also provides options to constrain the rule’s remote source range or to reference another security group. Use those options when only a monitoring network or a management group should be able to send echo requests. Confirm that the group is attached to the correct server port; creating a rule in an unused group has no effect.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesAmazon EC2 security groups
AWS describes ping as ICMP traffic and requires an inbound ICMP rule in the instance’s security group. In the console, add an inbound custom ICMP rule, choose the echo-request type when the interface offers message-type selection, and enter the tester’s public IPv4 or IPv6 CIDR. Check every security group attached to the network interface and any network ACL that can impose an additional deny. A rule in a different, unattached group will not change the packet path.
Provider settings that are easy to overlook
- Rule direction: ping begins as inbound traffic at the VPS, so an egress-only allowance cannot permit the initial request.
- Rule priority: some firewalls evaluate an explicit deny before a later allow. Move the allow above the deny or adjust its priority.
- Target selection: tags, labels, interfaces, projects, and security-group attachments can silently leave the VPS outside the rule’s scope.
- Public address association: a reserved address that is not attached to this instance, or a load-balancer address that does not forward ICMP, will not reach the guest.
- Logging: enable provider flow or firewall logging temporarily if available. A log entry proves the provider received the packet; it does not prove the guest accepted it.
Allow echo requests in the guest firewall
After the provider rule is active, inspect the VPS’s local policy. Identify the frontend actually managing the rules. Editing nftables directly while UFW or firewalld reloads its own configuration can make a change disappear or be superseded by a later drop.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
nftables IPv4 rule
In an existing inet table and input chain, add an accept rule matching echo requests:
nft add rule inet filter input ip protocol icmp icmp type echo-request acceptThe rule must be evaluated before a later rule that drops the same packet. If your table or chain has a different name, substitute those names. Use nft list ruleset to inspect the active order and verify that the rule appears in the chain receiving traffic from the public interface.
Free tools Windows power users keep installed
One-click scans. No signup required.
nftables IPv6 rule
Add a separate match for IPv6:
nft add rule inet filter input ip6 nexthdr icmpv6 icmpv6 type echo-request acceptOn systems with a dedicated IPv6 table, place the equivalent icmpv6 type echo-request rule in that table’s input chain. Neighbor discovery and other ICMPv6 control messages are important to IPv6 operation, so do not replace a complete IPv6 policy with a blanket drop or an overly broad exception.
Persist the change
The commands above alter the running ruleset. Save them using the persistence mechanism supplied by your distribution, or add the equivalent rule to the configuration managed by UFW or firewalld. Reload the firewall and reboot-test it on a maintenance window. A rule that works until the next restart is not a reliable monitoring configuration.
UFW, firewalld, and other frontends
If the VPS uses UFW, firewalld, a hosting control panel, or a vendor agent, create the equivalent ICMP echo-request allowance through that frontend and confirm its generated nftables or iptables rules. Command names and support for ICMP message types vary by distribution and release, so do not paste an iptables example into a host whose active backend is nftables without checking the resulting rules. The essential result is an ordered accept for the approved source and address family, followed by the existing default policy for everything else.
Test from a truly external network
Run the test from a host that is not inside the VPS provider’s private network, VPN, or peering fabric. A request from another instance in the same VPC may take a different path and can succeed even when the public path is blocked.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
- From an external IPv4 host, run
ping -4 <VPS_PUBLIC_IPV4>. - From an external IPv6 host, run
ping -6 <VPS_PUBLIC_IPV6>. - Send several requests and note whether you receive replies, timeouts, or an unreachable message.
- At the same time, watch provider firewall logs and the nftables rule counters with
nft list ruleset.
Some operating systems resolve a hostname to IPv6 first. Testing with explicit -4 and -6 avoids mistaking a failed IPv6 path for a failed IPv4 path. If the VPS has no routeable IPv6 address, an IPv6 ping cannot work regardless of firewall settings.
Use counters and logs to locate a timeout
A timeout is a symptom, not a layer diagnosis. Check the controls in order:
No packet or counter at the provider
If the provider firewall shows no matching request, investigate the tester’s actual public address, the destination address association, the rule’s target, and any upstream network policy. A home or corporate network may block outbound ICMP before the packet leaves. Confirm the test with a second external network when possible.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →The provider sees the request, but the host counter stays at zero
The packet may not be reaching the guest interface. Common causes are an incorrect public address, a load balancer or NAT service that does not forward ICMP, a provider rule attached to another interface, or an IPv4/IPv6 family mismatch. Check the VPS interface addresses and routes and verify that the rule targets that interface or instance.
The host counter increments, but no reply returns
A later drop rule, a kernel ICMP setting, or a routing problem is likely. Inspect the complete nftables chain order, not just the newly added line. Check reverse-path routing and the default route, then confirm that the reply uses the same address family as the request. A host can receive an IPv6 echo request yet fail to return it if its IPv6 route or address configuration is incomplete.
IPv4 works while IPv6 fails
Treat this as two independent configurations. Verify that the VPS has a globally routeable IPv6 address and default route, add an ICMPv6 provider rule with the tester’s IPv6 CIDR, and add the guest’s icmpv6 type echo-request allowance. Provider documentation treats IPv4 and IPv6 controls separately, so copying the IPv4 rule is insufficient.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Choose a safe source range
The quickest test is often a rule from every IPv4 source (0.0.0.0/0) or every IPv6 source (::/0). That proves whether the path works, but it also lets any Internet host send echo requests. Google Cloud’s guidance recommends specifying the particular IPv4 or IPv6 ranges needed instead of all sources.
For routine monitoring, permit only the monitoring service’s published CIDR. For administration, permit the office, VPN, or bastion range rather than an individual laptop if addresses rotate within that managed network. If your ISP changes a residential address frequently, use a VPN with a stable egress address or update the rule through automation instead of leaving a global rule permanently open.
What allowing ping exposes
nftables documentation notes that accepting echo requests lets probes discover that the host is alive. That is the principal security trade-off. Ping does not open a TCP service or authenticate a user, but it adds observable response traffic and can attract high-rate probes. Keep the source narrow, rate-limit where your firewall supports it, and monitor counters. Do not confuse hiding ping with hardening exposed services: SSH, web services, databases, and management interfaces still need their own authentication and access controls.
Make the configuration reproducible
Record the provider rule name, target, protocol, source CIDR, and address family in the same infrastructure configuration used for the VPS. Store the nftables or frontend rule in version control, and apply it during provisioning so replacement instances receive the same policy. Include a post-deployment test from an external monitoring location.
- Document why each source CIDR is allowed and who owns it.
- Keep IPv4 and IPv6 rules visibly separate.
- Set an expiration or review date for temporary
/0rules. - Verify rule counters after deployment and after a firewall reload.
- Remove stale monitor addresses when a provider changes its published ranges.
Common mistakes and their fixes
| Symptom | Likely mistake | Fix |
|---|---|---|
| SSH works but ping times out | SSH’s TCP rule exists, but ICMP is denied at the provider or guest layer. | Add the correctly scoped ICMP echo-request allowance in both layers. |
| Rule for port 22 or 443 did nothing | Ping is not TCP or UDP and has no destination port. | Select ICMP or ICMPv6, not a port-based rule. |
| Only one monitoring site works | The rule allows one source address, while the service uses several CIDRs or NAT egress points. | Use the service’s complete published ranges, or consolidate monitoring through a fixed egress. |
| Change disappears after reboot | The running nftables rule was never persisted, or a frontend overwrote it. | Save it in the active firewall frontend and reboot-test the configuration. |
| IPv4 succeeds, IPv6 times out | Only the IPv4 protocol, source range, or host rule was configured. | Create and verify the separate ICMPv6 provider and guest rules and the IPv6 route. |
| Provider logs traffic but the host sees none | The public address, interface target, or forwarding path is wrong. | Check address association, interface attachment, load-balancer behavior, and family selection. |
When you should not allow public ping
Some environments intentionally block unsolicited ICMP to reduce reconnaissance or unwanted traffic. If your monitoring system can check a TCP service, HTTPS endpoint, or an agent connection instead, that may provide a more meaningful health signal. Do not enable public ping merely because a dashboard has a generic “host down” alert; first decide whether reachability of the network layer is the property you need to measure.
If you do need network-layer monitoring, a narrowly scoped rule is usually preferable to a global one. Keep the provider and guest policies aligned, retain logs or counters long enough to troubleshoot, and review the allowance whenever the VPS moves networks or changes address.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
