Re: Support for IP redirection by CheckPoint Firewall-1 NG

Certainly, and depending on the OS,it will also
attempt to send a ICMP Redirct and be denied by the
firewall application without referencing a rule
number.  You can modify the firewall's kernel behavior
to allow ICMP Redirects.  This change is different
based the firewall's OS, this info can be found on
Checkpoint's website via secureknowledge.

--- Jarek Sluzewski <jsluzewski@exenet.com> wrote:
> Could someone confirm, if CheckPoint NG 4.x can send
> packet back out of the same interface which received
> it.
>
>       In other words, if the firewall receives a packet,
> and based on its routing table determines that this
> packet should be sent via same interface that
> received it, will the NG forward the packet or just
> drop it (as PIX would).
>        
>       Thanks,
>        
>       Jarek


                
__________________________________ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/ 

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------