NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] ICMP problems



try doing a traceroute first to see if you are getting to the firewall, you
will see this in the log viewer, check your subnet masks on the workstations
to make sure they think they are both on different subnets.
----- Original Message -----
From: "Gordon Webber" <[email protected]>
To: <[email protected]>
Sent: Sunday, December 16, 2001 3:53 PM
Subject: [FW-1] ICMP problems


> Hi, Just a simple one I hope...
>
> To simplify the description, lets say I have an FW-1 on a NOKIA with two
> user interfaces (ethernet) enabled.
> I have a workstation attached to the lan on each interface and I install a
> policy with no "clean-up" rule.
> Instead the last rule is "any any any accept".
> I have set "ipsofwd on" at the Nokia level. (I thought FW-1 allowed
> forwarding and tat it was just the Nokia that needed to be forced to allow
> this ?)
>
> And yet I cannot ping from one workstation to the other !
>
> The "Allow ICMP" option in the "Policy properties" only inserts an "any
any
> ICMP accept" rule anyway (?), so my "allow-any" rule should cover that.
> The routing/default gateway's on the workstations just points to the local
> interface on each.
>
> So what is stopping the ping ???
> Any suggestions would be gratefully received !
>
> Cheers, Gordon
>
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> If you have any questions on how to change your
> subscription options, email Ron Alcatraz at:
> [email protected]
> =================================================
>

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.