Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: Filter ICMP Packets

$
0
0

Hi,

 

Your term 2 is as follows :-

 

set firewall family inet filter [filter_bla_bla] term 2 from source-address [public ip]
set firewall family inet filter [filter_bla_bla] term 2 from source-address [public ip]
set firewall family inet filter [filter_bla_bla] term 2 from destination-address [my public ip]
set firewall family inet filter [filter_bla_bla] term 2 from protocol icmp
set firewall family inet filter [filter_bla_bla] term 2 then accept

 

Do these [pulic ip] in the source-address have 8.8.8.8 ?

 

If not, the term 2 would not be hit when icmp echo replies are coming from 8.8.8.8 to your public IP, would hit the term 4 and get dropped.

 

Regards,

Sahil Sharma

---------------------------------------------------

Please mark my solution as accepted if it helped, Kudos are appreciated as well.


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>