[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW-1] (no subject)
- To: [email protected]
- Subject: [FW-1] (no subject)
- From: Stuart Teo <[email protected]>
- Date: Sat, 17 Nov 2001 11:37:01 +0800
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20011019 Netscape6/6.2
C.T.Sim,
Regarding your FW problem, it's a policy problem. You can talk to Eddie
for help.
Regarding question 1), no. If the rule explicitly states that A can
ping to B, then B cannot ping to A since it has not been explicitly stated.
Regarding question 2), implied rules are also known as rule 0. In the
rulebase, rule 0 is hidden from view by default. First means that the
implied rule is to be placed before any user-defined-rules. Before-last
means that the implied rule must be placed right before the last
user-defined-rule. Last mean... obvious... [:)] You must understand
what is meant by the implied rules before you can understand all those...
Regards,
Stuart
