Look for any rules above the implicit reject that specify a service of Any.
If not that, they check the services allowed in rules above the implicit
reject for groups that could include ICMP services.
Rick McMaster
ePlus Technology
-----Original Message-----
From: Bryan Morris [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 27, 2000 7:17 PM
To: [EMAIL PROTECTED]
Subject: [FW1] ICMP still comes through even though Accept ICMP is not
checked
Hi,
I am having a weird problem w/ CP 4.1 on an NT server.
In the properties setting, 'Accept ICMP' is unchecked.
I also have an explicit reject for incoming ICMP.
Nonetheless, an outside host can still ping an internal host.
Why is that? What am I doing wrong?
Thanks,
/bmjr
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
