Firewall-1

[FW-1] ICMP Packets

Subject: [FW-1] ICMP Packets
From: Maurit Pereira Fagundes <MAURIT AT FGV DOT BR>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 29 Sep 2005 09:35:12 -0300
Hello all,

In global properties there is an option: Accept ICMP requests. I want to avoid 
that people in internet ping and run the tracerout command against my dmz 
servers.
what is the better way to do this? disabling this option in global proterties 
or creating a rule base to do this? If i create a rule base i must disable this 
option in rule base?

thanks in advance.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>