Checkpoint FW-1 NG FP3 blocks icmp-redirect

Article View: comp.security.firewalls

Article #392

Back to comp.security.firewalls Previous Next

#392

From: xantos
Date: Fri, 04 Apr 2003 23:33

12 lines
1363 bytes

Checkpoint FW-1 NG FP3 complains about sending icmp-redirect messages.

In this particular case a connection is set up from behind a router to
a server. The server has the Firewall as a default-gateway so it sends
it's reply-packet to the firewall. The Firewall wants to send a
redirect-packet back to the server but it's firewall-application
blocks the icmp-redirect-packet, even when any-any traffic is allowed.

Please advise,

Kind regards,
Xantos

Technical Details

Message-ID: <72804adf.0304041533.4f939f71@posting.google.com>

Path: arc1-ca.pugleaf.net!archiver1.google.com!postnews1.google.com!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,f5735d4b5c07e767,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,f5735d4b5c07e767,start
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2003-04-04 15:33:05 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!postnews1.google.com!not-for-mail
From: xantos@my-deja.com (xantos)
Newsgroups: comp.security.firewalls,cp.products.firewall-1
Subject: Checkpoint FW-1 NG FP3 blocks icmp-redirect
Date: 4 Apr 2003 15:33:04 -0800
Organization: http://groups.google.com/
Lines: 12
Message-ID: <72804adf.0304041533.4f939f71@posting.google.com>
NNTP-Posting-Host: 195.121.56.93
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: posting.google.com 1049499185 23589 127.0.0.1 (4 Apr 2003 23:33:05 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: 4 Apr 2003 23:33:05 GMT