topic PIX 506e, need help!!!! in Network Security

PIX 506e, need help!!!!

Dale_Bosley — Fri, 21 Feb 2020 07:33:49 GMT

I can't get the firewall to stop responding to pings, I have put in the following line of code.

access-list outside_access_in deny icmp any any

The firewall continues to repond to pings. What am I not doing?

Re: PIX 506e, need help!!!!

paddyxdoyle — Wed, 11 Aug 2004 17:46:14 GMT

Hi,

This access-list will stop ICMP that's being routed through the firewall only.

If you want to disable it from the outside interface then you need to enter :

"icmp deny any outside"

Rgds

Paddy

Re: PIX 506e, need help!!!!

Dale_Bosley — Wed, 11 Aug 2004 18:12:02 GMT

Thank you very much for your reply. Is that the line of code that I put in or do I just change the end of my access-list line so that it reads

access-list outside_access_in deny icmp any outside

thanks again

Re: PIX 506e, need help!!!!

eleibowitz — Wed, 11 Aug 2004 18:31:44 GMT

Put it in exactly as Paddy showed at the config prompt:

pixfirewall(config)# icmp deny any any

You can also specify an interface. For example, if you want to allow ping from the inside and deny it from the outside (to the "outside" interface), use:

pixfirewall(config)# icmp deny any outside

Re: PIX 506e, need help!!!!

scoclayton — Wed, 11 Aug 2004 18:46:16 GMT

It is important to remember that access-lists only apply to traffic that goes *through* the box. Traffic destined *to* the box is never processed via the ACL's applied to the interfaces.

Scott