NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] "Accept ICMP"


  • To: [email protected]
  • Subject: Re: [FW-1] "Accept ICMP"
  • From: Steve McNutt <[email protected]>
  • Date: Wed, 12 Jun 2002 12:52:51 -0400
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcISMOLDhA4QsntUQUKrnG9SlsFckgAAA8Hg
  • Thread-topic: Re: [FW-1] "Accept ICMP"

A compromise that will get the rest of the IS guys off of your back is to create a debugging rule that turns on ICMP.  Leave the rule off, and turn it on tempoarily as needed.

-----Original Message-----
From: Russell Washington [mailto:[email protected]]
Sent: Wednesday, June 12, 2002 10:59 AM
To: [email protected]
Subject: Re: [FW-1] "Accept ICMP"


As far as what you should/shouldn't enable, that's largely a matter of the
situation you're in and using your best judgment.  I would prefer to have
ICMP off all the time, period.  But it makes certain kinds of
troubleshooting a royal pain. :)

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.