Re: [FW1] ICMP Type 3 packets getting through Rule 0

[Dameon Welch <dwelch@hotmail.com>]

>The log shows that these packets are 'icmp-type 3 icmp-code 3' and
>'icmp-type 3 icmp-code 13'
>
>Our policy properties has ICMP disabled, so I would expect these
packets
>to be stopped by Rule 0 (the policy properties).

Unchecking ICMP in the Rulebase Properties does not automatically
"drop" something. By unchecking something from Rulebase Properties,
you are simply allowing the packets to pass through the rulebase
normally. 

Drops on Rule 0 come from anti-spoofing or authentication violations.

-- PhoneBoy


_______________________________________________________________
Get Free Email and Do More On The Web. Visit http://www.msn.com


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================