Checkpoint FW-1 NG FP3 blocks icmp-redirect

Thread View: comp.security.firewalls

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by xantos Fri, 04 Apr 2003 23:33

#392

Author: xantos
Date: Fri, 04 Apr 2003 23:33

12 lines
1363 bytes

Checkpoint FW-1 NG FP3 complains about sending icmp-redirect messages.

In this particular case a connection is set up from behind a router to
a server. The server has the Firewall as a default-gateway so it sends
it's reply-packet to the firewall. The Firewall wants to send a
redirect-packet back to the server but it's firewall-application
blocks the icmp-redirect-packet, even when any-any traffic is allowed.

Please advise,

Kind regards,
Xantos

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads