Re: [FW-1] stealth rule questions

[Damien Hart]

my understanding of the destination is that the objects specified include ALL interfaces on that object.  at least that is how it appears to work for me.   Damo       Rule looks good.   destination : External IP of firewall - i.e. - ur 11.7.113.x - which I'm assuming is actually a publically routable address - - - - in other words, the IP the "bad guys" can access...... at least, thats always been my understanding!   HTH,   R. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED]]On Behalf Of Security Guy Sent: 10 March 2003 22:26 To: [EMAIL PROTECTED] Subject: [FW-1] stealth rule questions To make a long story short the "stealth" rule was removed from our firewall.  It will be re-added this week, however I just want to make sure the rule is setup properly   example rule: Source: Any  Destination: firewalls  Service: Any  Action: Drop  Track:Long  Install on: gateways  Time:any   I'm wondering about the destination, to what interface does this apply?    Ext (public IP) 11.7.113.x  [example only] Dmz: 10.0.0.x & 192.168.1.x  [example only] Internal: 10.200.130.X  [example only]   *FW Specs: twin nokia ip440's, [VRRP mode] checkpoint 4.1, one service pack behind current*   So to finally ask the question, does my rule check out & what interface or IPs should I use as my "destination"   Thanks ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================