| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW-1] ICMP Packet out of state
- To: [email protected]
- Subject: [FW-1] ICMP Packet out of state
- From: "Spadafora, Robert (CA - Toronto)" <[email protected]>
- Date: Mon, 28 Oct 2002 12:36:29 -0500
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcJ+qIxHysaFyLIMRZ69z1ODRQnEtA==
- Thread-topic: ICMP Packet out of state
Good-day all,
I have a situation in which packets passing between A and B "do not" traverse the firewall when going from A to B but, do traverse the firewall when going from B to A.
The result is dropped packets from B to A due to "out of state" packets as described in knowledge base article skl4308.
As noted in the knowledge base article, the solution for TCP packets is to modify the objects_5_0.C file as follows:
fw_allow_out_of_state_tcp (1)
That seems to resolve the problem for TCP based packets.
My question is:
What can be done to allow the firewall to accept ICMP packets which are "out of state"?
Regards,
Rob S.
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
