Re: ICMP blocking on PIX .4.4.1

[lk-m-wizards () bigears solsoft com (Lorens Kockum)]

On firewall-wizards nawk () real-secure com wrote:
> If you really want to be anal,
> setup ACL on your border routers, then apply your rules on the firewall and
> last setup another router behind the firewall with ACL again. This way the
> attacker has to pass all three to get into your network.

And of course set your logs so that you get alerted whenever the
firewall or the internal router get a packet that should have
been blocked by the external router.

<insert plug for my company's ACL policy manager here ...>