Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: Filter ICMP Packets

$
0
0

 

 

 

Hey guys, I´m Back

I got the solution to this case.

The problem was the reply and icmp session.

I did the comand "set security flow sync-icmp-session" because this command do not inspection the reply, when I start the ping from Lan (trust), the reply is coming in the same session and I configured the icmp-request to drop all connections from internet.
With the session opened the reply will not dropped

The secret was the command to allow the icmp inspection and drop the ICMP-Request in the term 4

Tks for everyone that helped me

 

set firewall family inet filter bla bla term 4 from protocol icmp
set firewall family inet filter bla bla term 4 from protocol icmp6
set firewall family inet filter bla bla term 4 from icmp-type echo-requestSmiley Happy
set firewall family inet filter bla blaterm 4 then reject

set security flow sync-icmp-sessionSmiley Happy


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>