ICMP Implied Rule

[rmmagow]

HELP NEEDED!! How can I eliminate the implied ICMP accept rule in a checkpoint FW1 4.0 Solaris FW? I want to put in an ICMP drop for all ICMP but the implied rule is taking over. THANKS MUCH

 

[rmmagow]

Help. I am desperate. I'm trying to stop the new virus thing from kill ing my default route. Attempting to get it to drop all icmp. Advise sought. Thanks

 

[rn4it]

Global properties there should be a checkbox for accept icmp.

 

[rmmagow]

Thank you. Yeah, in desperation I found this setting. We were hit hard with a modified blaster. By shutting down my default route I was able to drop bandwidth usage at my small sites so the windows folks could push out a fix. Killing the icmp thing let me turn on the default route without killing my firewall as the windows folks continued cleaning. All-in-all we have about 90 sites and a total of 7000 computers that needed attention. Considering the degree of infection (near 100%) we only lost two days of full production.