Re: [FW1] ICMP still comes through even though Accept ICMP is not checked

[Peter Goodridge <petegdr@FW1-NOSPAMyahoo.com>]

Hi Bryan,

What rule does your log say is allowing the icmp
packets in?  If it's rule zero, it's an implied rule
problem, otherwise it's something you set up in the
rule base that you should be able to fix by moving
your explicit icmp reject rule above the rule allowing
inbound icmp.  Of course you may break something else
in the process....

HTH,
Pete Goodridge

--- Bryan Morris <bryanmorrisjr@hotmail.com> wrote:
> 
> Hi,
> 
> I am having a weird problem w/ CP 4.1 on an NT
> server.
> 
> In the properties setting, ?Accept ICMP? is
> unchecked.
> I also have an explicit reject for incoming ICMP.
> 
> Nonetheless, an outside host can still ping an
> internal host.
> 
> Why is that? What am I doing wrong?
> 
> Thanks,
> 
> /bmjr
> 
>
_________________________________________________________________
> Get your FREE download of MSN Explorer at
> http://explorer.msn.com
> 
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================


__________________________________________________
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================