By default, the Black Ice (BLACKICE) firewall does not stop the ping. If you are sure to block the ping, you need to set ICMP. First in safe mode into the BlackICE installation directory, with Notepad to open the Firewall.ini file (or in DOS with edit open to it). Finding the [MANUAL ICMP ACCEPT] row, you can see that the content under this item is empty, that is, BlackICE does not interfere with ICMP. We need to manually add some commands under it to have the ability to ping. Set the contents as follows:
A. If you add the following command line under [MANUAL ICMP ACCEPT], the ICMP echo from any IP address is blocked:
REJECT, 8:0, ICMP, 2004-04-17 22:01:00, Perpetual, 1000, MANUAL
B. By adding the following command line under [MANUAL ICMP ACCEPT], an ICMP echo from a specific IP address is allowed, taking 10.0.0.2 for example:
ACCEPT, 10.0.0.2:8:0, ICMP, 2004-04-17 22:01:00, Perpetual, 1000, MANUAL
C. Add the following command line under [MANUAL ICMP ACCEPT] to intercept an ICMP echo from an IP address segment, such as an IP address segment 10.0.0.2-10.0.0.29:
REJECT, 10.0.0.2-10.0.0.29:8:0, ICMP, 2004-04-17 22:01:00, Perpetual, 1000, MANUAL
D. Mount the ICMP timestamp by adding the following command line under [MANUAL ICMP ACCEPT]:
REJECT, 13:0, ICMP TIMESTAMP, 2004-04-17 22:01:00, Perpetual, 1000, MANUAL
E. to include the following command line under [MANUAL ICMP ACCEPT], block the local address mask request:
REJECT, 17:0, ICMP maskreq, 2004-04-17 22:01:00, Perpetual, 1000, MANUAL
After modifying the Firewall.ini file, save it. Restart your computer, and your computer will be able to ping or perform a reset ICMP rule.