you need icmp_request, icmp_reply,. not ECHO.

----- Original Message ----- 
From: "Alun Jenkins" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, January 11, 2001 11:40 AM
Subject: Re: RE: [FW1] ICMP Stateful or NOT ?


> 
> Has anyone got Sun Yu's suggestion to work?
> I tried and couldn't
> my rules looked like this
> 
> 
> Ourlans -> any echo/rep   accept longlog gateways any
>                          echo/req
>                          traceroute
> any any drop long
> 
> Properties say enable ICMP after last 
> 
> Ping / trace route don't work
> The only way I could get them to work was to move the properties ICMP to before last 
> which kinda defeats the object.
> 
> Alun
> 
> 
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to