Ping outside?

[rockhoro]

I am lost here - just can't figure this out!

I would like to be able to ping outside of my local network via my PIX520. I do not want the outside world to be able to ping me and currently they cannot - but - I need to ping outside from time to time.

What is the correct conduit statement that will allow this?

Many thanks! Ray

[osam]

conduit permit icmp any any echo-reply

This shall do it. You are only allowing "echo-replies". If you want to explicitly disable outside from PINGing your network.. Have the following command,

conduit deny icmp any any echo

At least with both configured, you can monitor how many attempts you getting from outside to PING you, by using "show conduit" command.

[rockhoro]

Thanks very much - that took care of it!

[osam]

No prob.. :)