Thanks guys,
But according to the article http://www.phoneboy.com/fw1/faq/0066.html
version 4.0 onwards performs stateful inspection of ICMP and so I don't need
to allow reply etc. inbound, as I have switched "enable icmp" on as Last.
------------------------------------------------------------------------------------------
The information contained in this e-mail message is confidential and may be
privileged.
It is intended only for the use of the individual or entity named above. If the reader
of this message is not the intended recipient, or the employee or agent responsible to
deliver it to the intended recipient, this message must not be copied or distributed
to
any other person. If you have received this message in error, please notify the sender
by telephone (+44-20-7337-3500) and destroy the original message. The Gerrard Group
reserves
the right to monitor all e-mail messages passing through its network.
This e-mail originates from the Gerrard Group unless otherwise stated.
------------------------------------------------------------------------------------------
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================