RE: [FW1] Accept ICMP vs. Accept "Last"

["Chambers, Steven" <Steven.Chambers@cme-net.com>]

Accept last will only drop if there is a cleanup rule
ie, Any --- any --- drop

in the rule base( this happens before the LAST rule)

SC

 -----Original Message-----
From:   Kristy Davis [mailto:Kristy_Davis2@excite.com] 
Sent:   20 March 2000 15:41
To:     fw-1-mailinglist@lists.us.checkpoint.com
Subject:        [FW1] Accept ICMP vs. Accept "Last"



 hello

 what is the difference between disabling "Accept ICMP" in the properties
menu vs. setting it to "Last".  If I set it to "Last", it will never fire,
and if I uncheck "Accept ICMP", it will disable it as well.  In both cases,
the firewal will not return "echo reply" packets.  So what is the
difference?  Would appreciate if someone could explain.

thanks

-kristen





_______________________________________________________
Get 100% FREE Internet Access powered by Excite
Visit http://freelane.excite.com/freeisp



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================