RE: ICMP

[Henry Sieff <hsieff () orthodon com>]

I don't have to open up ICMP to get metaframe working through the old
firewall. Are you sure you don't have a forced disconnect set up on your
citrix configuration. Which ICMP is it trying to use?

Henry

> -----Original Message-----
> From: Stan Anderson [mailto:Stan () iconfitness com]
> Sent: Monday, November 08, 1999 12:17 PM
> To: 'firewall-wizards () nfr net'
> Subject: ICMP
>
>
> I have Citrix WinFrame 1.8 servers running behind my 
> firewall.  For Citrix
> ICA they say you only need to open udp 1604 and tcp 1494, so 
> I only allow
> those two ports to my servers.  My clients outside the 
> firewall drop if they
> are connected for any legnth of time.  In my logs I see denys 
> for ICMP to my
> servers IP addresses.  Citrix doesn't say you need to allow 
> ICMP, but does
> anyone know if you need to.
>
>       Thanks,         
>         Stan Anderson
>         ICON Health & Fitness, Inc.
>         (435) 750-7794