Depends upon whom you wish to be stealthy towards, nicht wahr? (potentially all....)
Tony Iannotti AVP: Dir. Net. Ops. [EMAIL PROTECTED] Phone: (973) 353-6400 Cell: (201) 538-4382 Fax: (973) 642-7919 "We must become the change we want to see." -- Mahatma Gandhi "When making public policy decisions about new technologies for the Government, I think one should ask oneself which technologies would best strengthen the hand of a police state. Then, do not allow the Government to deploy those technologies." -- Phil Zimmermann The #1 Way to Pay Online http://www.checkfree.com/paybillsonline |---------+--------------------------------------------> | | Damien Hart | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Mailing list for | | | discussion of Firewall-1 | | | <[EMAIL PROTECTED]| | | KPOINT.COM> | | | | | | | | | 03/10/2003 07:10 PM | | | Please respond to Mailing list | | | for discussion of Firewall-1 | | | | |---------+--------------------------------------------> >----------------------------------------------------------------------------------------------| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: Re: [FW-1] stealth rule questions | >----------------------------------------------------------------------------------------------| my understanding of the destination is that the objects specified include ALL interfaces on that object. at least that is how it appears to work for me. Damo Rule looks good. destination : External IP of firewall - i.e. - ur 11.7.113.x - which I'm assuming is actually a publically routable address - - - - in other words, the IP the "bad guys" can access...... at least, thats always been my understanding! HTH, R. -----Original Message----- From: Mailing list for discussion of Firewall-1 [ mailto:[EMAIL PROTECTED] Behalf Of Security Guy Sent: 10 March 2003 22:26 To: [EMAIL PROTECTED] Subject: [FW-1] stealth rule questions To make a long story short the "stealth" rule was removed from our firewall. It will be re-added this week, however I just want to make sure the rule is setup properly example rule: Source: Any Destination: firewalls Service: Any Action: Drop Track:Long Install on: gateways Time:any I'm wondering about the destination, to what interface does this apply? Ext (public IP) 11.7.113.x [example only] Dmz: 10.0.0.x & 192.168.1.x [example only] Internal: 10.200.130.X [example only] *FW Specs: twin nokia ip440's, [VRRP mode] checkpoint 4.1, one service pack behind current* So to finally ask the question, does my rule check out & what interface or IPs should I use as my "destination" Thanks ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
