Re: ICMP problems with Firewall-1 (long)

["Ryan Russell" <ryanr () sybase com>]

I'm not following.... I don't think I made any reference to that
in my post... is this something in Bill Burns' code you speaking of?

                    Ryan





Darren Reed <darrenr () reed wattle id au> on 07/01/98 05:49:00 AM

To:   Ryan Russell/SYBASE
cc:   firewall-wizards () nfr net
Subject:  Re: ICMP problems with Firewall-1 (long)





You might want to scrub the check for ttl being less than 30.

Some systems are shipping these days with a default ttl of 64
which will fail the check falsely.

Darren