[FW1] Unexplained log entries

[jvieira@dmr.com]

This weekend several ISPs started sending icmp and udp packets to my firewall
and the machines on my DMZ.  The logs showed that the packets were dropped.
However, later log entries showed that the firewall itself was replying to icmp
and udp packets to the same ip addresses that earlier were dropped.  Now if the
intial packets were dropped how did the FW know to reply to them?  Since I have
a rule that drop any packets originating from the FW the logs showed them as
dropped.  However, the logs also showed that the packets destined for the FW
were dropped aswell but obviouly that wasn't the case otherwise the FW would be
replying to them.

Can anyone tell me what these log entries mean.


Thanks,

Joe




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================