can PIX drop ping to outside int?

[l.isko]

i don't anyone to ping the outside int. of the PIX from the internet.

this doesn't work.

access-list 101 deny icmp any any

access-group 101 in interface outside

????? Help!

thanks

[ewieczorek]

This is what I use to deny all ping requests and permit all unreachable messages at the outside interface...

icmp deny any echo-reply outside

icmp permit any unreachable outside

[l.isko]

excellent. thanks!!