NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] How to make a multicast packet to test it passing throughFW-1?



Hello,
Thanks a lot for your great help.

crist.clark> You'd have to set up multicast routing on the firewall to do that. That's
crist.clark> a lot more complicated than just making a multicast packet.

I have no idea howto set up multicast routing on a firewall.
The firewall manual said,
"Firewall 1 does not treat multicast as a special case, so for VPN-1/FireWall-1
, a multicast packet is simply an IP packet with a class D (224.0.0.0   239.255
.255.255) destination address."

crist.clark> If you want to make a multicast packet, on a default install of Solaris
crist.clark> you can just,
crist.clark>
crist.clark>   $ ping -I1 224.0.0.1
crist.clark>
crist.clark> For real fun (if you have other Solaris systems on the LAN with the default
crist.clark> multicasting setup). A "ping 224.0.0.1" will also work fine on a Windows
crist.clark> box (Win2k anyway).

I have just $ ping -I1 224.0.0.1 in the firewall(Solaris8) and got
the following message,
PING 224.0.0.1: 56 data bytes
64 bytes from fwlb2 (192.168.2.254): icmp_seq=0. time=3. ms
64 bytes from fwlb2 (192.168.2.254): icmp_seq=1. time=1. ms
64 bytes from fwlb2 (192.168.2.254): icmp_seq=2. time=0. ms
64 bytes from fwlb2 (192.168.2.254): icmp_seq=3. time=1. ms
...
Does it mean a multicast packet has passed the firewall?
Sorry for my very newbie question.

Best regards,

--Wen

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.