Re: [FW1] When should ANY be used, if ever?

[Chris F <freaknetboy@FW1-NOSPAMyahoo.com>]

Any one know this:

Is "any" more efficient for FW1 than to define an
object to use?

For example:

Any  http  DMZ

...rather than say...

lan_net  http  DMZ

Thanks -- cf

--- Peter Lukas <plukas@oss.uswest.net> wrote:
> 
> Remember that "Any" is ANY not always.  But, in your
> case, it may be
> better to use the "negate" function and begin
> permiting limited access
> that way.
> 
> Peter Lukas
> 
> On Fri, 19 Jan 2001, Allan Pratt wrote:
> 
> > 
> > Hi,
> > 
> > In the source, destination and protocol fields,
> should ANY ever be used?
> > 
> > I was thinking that it would be better to use
> inverse points, as an example, 
> > support you wanted all Internal networks to access
> the Internet, normally it 
> > is written:
> > 
> > Internal_Net = Any = Any
> > 
> > Would it not be better to not use ANY in the
> destination and inverse the 
> > DMZ.
> > 
> > That way it would be Any network BUT the DMZ or
> whatever should be 
> > restriced.
> > 
> > Any thought?
> > 
> > Thanks,
> > 
> > Allan
> > 
> >
>
_________________________________________________________________
> > Get your FREE download of MSN Explorer at
> http://explorer.msn.com
> > 
> > 
> > 
> >
>
================================================================================
> >      To unsubscribe from this mailing list, please
> see the instructions at
> >               
> http://www.checkpoint.com/services/mailing.html
> >
>
================================================================================
> > 
> 
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================


__________________________________________________
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================