PIX 506e, need help!!!!

[Dale_Bosley]

I can't get the firewall to stop responding to pings, I have put in the following line of code.

access-list outside_access_in deny icmp any any

The firewall continues to repond to pings. What am I not doing?

[paddyxdoyle]

Hi,

This access-list will stop ICMP that's being routed through the firewall only.

If you want to disable it from the outside interface then you need to enter :

"icmp deny any outside"

Rgds

Paddy

[Dale_Bosley]

Thank you very much for your reply. Is that the line of code that I put in or do I just change the end of my access-list line so that it reads

access-list outside_access_in deny icmp any outside

thanks again

[eleibowitz]

Put it in exactly as Paddy showed at the config prompt:

pixfirewall(config)# icmp deny any any

You can also specify an interface. For example, if you want to allow ping from the inside and deny it from the outside (to the "outside" interface), use:

pixfirewall(config)# icmp deny any outside

[scoclayton]

It is important to remember that access-lists only apply to traffic that goes *through* the box. Traffic destined *to* the box is never processed via the ACL's applied to the interfaces.

Scott