On Sat, Apr 05, 2003 at 06:38:00AM +0300, Mitchell wrote: > I would think that specifically allowing the echo-reply is > not needed (state table) Can someone smarter than I confirm > or deny this?
You're correct, that's covered by statefull inspection and pings etc. work if the firewall has the default settings (Global Properties, Statefull Inspection) that allow statefull ICMP replies. -- Hannu Liljemark | Appelsiini Finland Oy | http://appelsiini.com ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
