Thanks, but seems that I still need to explicitly grant access for the
echo-replies. ICMP is enabled as last and outbound echo-request from the
Firewall is covered by the "allow outbound..." option.
Ken
______________________________ Reply Separator _________________________________
Subject: Re: [FW1] "Stateful" icmp inspection
Author: "Michael C. Wilkinson" <[EMAIL PROTECTED]> at JF-HK-EMG
Date: 06/06/00 20:07
[EMAIL PROTECTED] wrote:
>
> Has anyone experienced unstateful icmp inpection on CPv4.1?
Hi Ken-
Check out http://www.phoneboy.com/fw1/faq/0066.html and the link
to Bill Burns excellent stateful icmp inspect module... We have used it
on 4.0 successfully and it helps keep the # of rules down in our env;)
Mike
*******************************************************************
This communication is confidential and is intended for use only by
the addressee. Jardine Fleming accepts no responsibility for any
mistransmission of, or interference with, this communication.
*******************************************************************
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
