Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've got one question regarding Ubuntu Juju deployment, on AWS cloud. I'm using Bash to write my hooks. At the end of the install hook/script, I have lines that expose some of my TCP ports(80,443,5666 etc)


open-port 80/tcp
open-port 443/tcp

My question is how can I expose ICMP ports in a similar manner? ICMP ECHO request, ICMP ECHO reply is what I need.

The reason for this is that we use Nagios for monitoring of our EC2 instances. Alarms fire off right away, complaining that instance is not reachable, since Nagios relies on ICMP for basic remote host check.

share|improve this question
Nitpicking, ICMP does not have ports. Ports are provided by TCP or UDP or SCTP. See for details. – sarnold Aug 29 '13 at 19:06
up vote 2 down vote accepted

You can't.

Juju in AWS uses EC2 security groups. Though the security groups can be made to allow ICMP with the EC2 API or Console, there are no hooks anywhere in the Juju code to do so. The only hooks that exist are for TCP and UDP.

If you have access to the EC2 console, you can find the relevant security group and allow ICMP there.

Or, if you have the credentials configured for the ec2-api-tools, you can use a command like:

ec2-authorize <group> -P icmp -t -1:-1 -s

In Juju bug 833064, they mention an intent to switch to machine-level firewalling (iptables on the instance) rather than continuing to limit themselves to the platform's firewalling capabilities and APIs.

share|improve this answer
Thanks, I guess that will do. – Nemmy Aug 31 '13 at 22:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.