Re: [FW1] Ping of Death

[steve <smoran@FW1-NOSPAMstshotelnet.com>]

dude its a total piece of cake, check out the link
http://support.checkpoint.com/service/publisher.asp?id=55.0.206
if that dont work its the public config doc's section on checkpoint site.

just create a new service, other, define it as
for match put:
icmp, (ip_off&0x2000)
use what name you want, and then create a rule, any any whatever name, drop.
Dan Hitchcock wrote:

> Why on earth would you want to allow PING from ANY?  If you must do this,
> ping of death is one of the associated risks.  The best you can do is make
> sure the OS on all ping-able boxes has all the latest security patches
> applied.
>
> Dan Hitchcock
> CCNA, MCSE
> Network Engineer
> Xylo, Inc. (formerly employeesavings.com)
>> The work/life solution for corporate thought leaders
>
> -----Original Message-----
> From: Scott Becker [mailto:scotbecker@hotmail.com]
> Sent: Wednesday, October 11, 2000 8:56 PM
> To: fw-1-mailinglist@lists.us.checkpoint.com
> Subject: [FW1] Ping of Death
>
> Hi, we'd like to allow ping from ANY however we want to avoid Ping of Death.
>
> Is there any way i can do this ?
>
> Thanks.
> _________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> Share information about yourself, create your own public profile at
> http://profiles.msn.com.
>
> ============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ============================================================================
> ====
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================