see http://www.enteract.com/~lspitz/rules.html for Lance Spitzner's explanation of how CP rules work. My CP fw seems to work like his article says. Maybe the phoneboy article is out of date.
>>> [EMAIL PROTECTED] 11/20/01 12:44PM >>> According to this article http://www.phoneboy.com/faq/0181.html <http://www.phoneboy.com/faq/0181.html> each connection attempt through CP is required to traverse the entire rule base. In my training I thought I was told once a rule matches a connection attempt the connection is accepted or dropped. Is this not the case with CP? =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ===============================================
