Re: RE: [FW1] ICMP Stateful or NOT ?

[Alun Jenkins]

Has anyone got Sun Yu's suggestion to work?
I tried and couldn't
my rules looked like this


Ourlans -> any echo/rep   accept longlog gateways any
                         echo/req
                         traceroute
any any drop long

Properties say enable ICMP after last 

Ping / trace route don't work
The only way I could get them to work was to move the properties ICMP to before last 
which kinda defeats the object.

Alun



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================