Re: Firewall stateful handling of ICMP packets

there are expert modes where you can apply the name source destination protocol time comments. rank state action track for more stabilized dedicated connections I am certain there are more depending on the vender -Henry Sean Donelan <sean@donelan.com> wrote: You could drop ICMP packets at your firewall if the firewalls properly implemented stateful inspection of ICMP packets. The problem is few firewalls include ICMP responses in their statefull analysis. So you are left with two bad choices, permit "all" ICMP packets or deny "all" ICMP packets.