>At 23:21 22.06.00 +0000, you wrote:
>Can anyone give me a hind about the predefined service icmp-proto?
>The match section has 1, and I'm not sure what that means (the match section for
>other predefined icmp services seem to be match the "type" field). Does 1=TRUE so
>that any icmp packets are a match?
Hi D H,
yes, the 1 means nonzero and therefore is interpreted as TRUE if the IP
header has the proto field set to "1" (icmp). You could also put in -1, 5,
or 23 - the result would always be the same as long as (exp) is not 0.
HTH,
Hans
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
