It is most likely being allowed in Ruleset 0, or more commonly referred to
as Policy >> Properties menu of fwpolicy.  Check the "Security Policy" &
"ACL" Tabs and disable icmp in there.

To verify go to "View Menu" and select "Implied Pseudo Rules"

Good Luck
HC






[EMAIL PROTECTED] on 05/23/2000 03:57:10 PM

To:   [EMAIL PROTECTED]
cc:    (bcc: Harry Chu/SIAC)
Subject:  RE: [FW1] Allow pinging or not?





In Firewall-1 how do you prevent ICMP pings to individual servers?  In my
rules I'm not allowing icmp but I can still ping my servers from the
Internet.

Damir Matanic
Chicago



===========================================================================
=====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
===========================================================================
=====






================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to