Basic rulebase for 4.x after turning off implied rules:
No. SRC DST SERVICE ACTION
--------------------------------------
1. MGMT FW FW1 ACCEPT {allow MGMT to push policies
and cmds to FW}
--------------------------------------
2. FW MGMT FW1
FW_LOG ACCEPT {allow FW to fetch policies and push
logs/alerts/status to MGMT}
--------------------------------------
3. ANY FW ANY DROP {stealth rule}
--------------------------------------
4. GUI MGMT FW1_MGMT ACCEPT {need this rule if GUI has to go
through a FW to get to MGMT}
--------------------------------------
x. {OTHER RULES...}
--------------------------------------
x. ANY ANY ANY DROP {clean up rule}
--------------------------------------
-Amin
> -----Original Message-----
> From: Russell Washington [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 22, 2002 11:30 AM
> To: [EMAIL PROTECTED]
> Subject: [FW-1] Eliminating Implied Rules - reference material
>
>
> Can someone recommend a resource covering strategies for
> replacing implied
> rules with explicit ones on FW1 4.x? Does Phoneboy's book cover this?
>
> Thx!
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
