Can you ping the internal interace of the opposite firewall? If so, it might
be a downstream router that's blocking it.
Ray
From: "Luiz H. Guimarães Filho" <lhgf AT HOTMAIL DOT COM>
Reply-To: Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Problems with ICMP and VPN.
Date: Tue, 25 Oct 2005 14:50:52 -0200
Hello guys,
I have a little problem with a VPN connection.
This VPN, is based in Site to Site (Branch to Branch) and works fine. BUT,
the icmp protocol doesn't work (The main problem is with ping).
When a host try to ping other host (Using this VPN connection) the ping are
logged, but doesn't have reply from it. I can see in both firewall's (log)
from this ping, but I don't get any reply.
I have the same trouble with traceroute. Other protocols (tcp), are working
fine, and I don't have any troubles.
Someone can give me a tip ?
Thanks in Advance.
_________________________________________________________________
MSN Messenger: instale grátis e converse com seus amigos.
http://messenger.msn.com.br
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|