[FW-1] stealth rule questions

[Security Guy]

To make a long story short the "stealth" rule was removed from our firewall.  It will be re-added this week, however I just want to make sure the rule is setup properly   example rule: Source: Any  Destination: firewalls  Service: Any  Action: Drop  Track:Long  Install on: gateways  Time:any   I'm wondering about the destination, to what interface does this apply?    Ext (public IP) 11.7.113.x  [example only] Dmz: 10.0.0.x & 192.168.1.x  [example only] Internal: 10.200.130.X  [example only]   *FW Specs: twin nokia ip440's, [VRRP mode] checkpoint 4.1, one service pack behind current*   So to finally ask the question, does my rule check out & what interface or IPs should I use as my "destination"   Thanks ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================