Using the global properties will block all ICMP. You will need to not block it in properties and then create rules allowing it to work as you want it.
Scott Lucas, CNE, CCSA Technology Analyst Mercy Hospital 305-285-2769 >>> [EMAIL PROTECTED] 01/15/04 09:28AM >>> Using Checkpoint 4.1, what's the best [aka least painful] way to block ICMP traffic? I'd like to disallow inbound IMCP yet allow ICMP to work within our DMZ. I've tried disabling ICMP via the properties panel, it's a little too effective. Can I make exceptions for DMZ traffic? Thanks ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
