Hello Chris,

What is splat?  I've looked around and haven't found anything but
passing references to it -

Is it SecurePlatform something?

Thanks,
Lars

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of
Covington, Chris
Sent: Tuesday, January 27, 2004 5:52 PM
To: [EMAIL PROTECTED]
Subject: [FW-1] splat r55: ICMP redirect packets are not allowed


Hi all,

I've followed sk10254 to allow ICMP redirect packets on one of my splat
r55 boxes by adding fw_icmp_redirects=1 to $FWDIR/modules/fwkern.conf,
rebooted, and I still get the following in the logs:

Information:    ICMP: Host Redirect
                        ICMP Type: 5
                        ICMP Code: 1
                        message_info: ICMP redirect packets are not
allowed

Is there a specific rule I need to create in addition to the fix from
sk10254?  Anything else I should try?

thanks
Chris

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to