Firewall-1

Re: [FW-1] Problems with ICMP and VPN.

Subject: Re: [FW-1] Problems with ICMP and VPN.
From: Ray <sixsigma44 AT HOTMAIL DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Tue, 25 Oct 2005 18:52:12 -0400
Can you ping the internal interace of the opposite firewall? If so, it might be a downstream router that's blocking it.

Ray

From: "Luiz H. Guimarães Filho" <lhgf AT HOTMAIL DOT COM>
Reply-To: Mailing list for discussion of Firewall-1 <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Problems with ICMP and VPN.
Date: Tue, 25 Oct 2005 14:50:52 -0200

Hello guys,

I have a little problem with a VPN connection.

This VPN, is based in Site to Site (Branch to Branch) and works fine. BUT, the icmp protocol doesn't work (The main problem is with ping).

When a host try to ping other host (Using this VPN connection) the ping are logged, but doesn't have reply from it. I can see in both firewall's (log) from this ping, but I don't get any reply.

I have the same trouble with traceroute. Other protocols (tcp), are working fine, and I don't have any troubles.

Someone can give me a tip ?

Thanks in Advance.

_________________________________________________________________
MSN Messenger: instale grátis e converse com seus amigos. http://messenger.msn.com.br

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>