you need icmp_request, icmp_reply,. not ECHO.
----- Original Message -----
From: "Alun Jenkins" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, January 11, 2001 11:40 AM
Subject: Re: RE: [FW1] ICMP Stateful or NOT ?
>
> Has anyone got Sun Yu's suggestion to work?
> I tried and couldn't
> my rules looked like this
>
>
> Ourlans -> any echo/rep accept longlog gateways any
> echo/req
> traceroute
> any any drop long
>
> Properties say enable ICMP after last
>
> Ping / trace route don't work
> The only way I could get them to work was to move the properties ICMP to before last
> which kinda defeats the object.
>
> Alun
>
>
>
> ================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ================================================================================
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================