| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW1] RE:
On Thu, Aug 16, 2001 at 09:42:45AM -0400, Andy David wrote:
>
> You dont need a rule. Just Uncheck the "Accept ICMP" box in the
> Policy/Properties and reinstall the policy
I hate to repeat this again and again -- ICMP is an important part of
TCP/IP. You cannot do without it, or at least not if you want your
network connections to work properly.
If you need to block some ICMP, first find out whether you really don't
need it, then block it, but use a rule that block specific ICMP like
echo-request, timestamp etc. from specific sources or to specific
destinations. Never block ICMP alltogether.
greetings
Hanus Adler
--
One Unix to rule them all, One Resolver to find them,
One IP to bring them all and in the zone to bind them.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
|
|
