The best way to do it will be to pemit only the icmp echo replies from the
outside to inside.
access-list 101 permit icmp any any echo-reply
This will be places on the inside of the interface that is connected to the
outside world and will prevent the outside world to ping you but you can
ping to the outside world.
Regards
Atif
----- Original Message -----
From: Blake Traister <[EMAIL PROTECTED]>
Newsgroups: groupstudy.cisco
To: <[EMAIL PROTECTED]>
Sent: Monday, June 05, 2000 1:53 AM
Subject: ICMP Filters HELP!
> I cannot figure out for the life of me how I can stop incoming ICMP
> packets that originate outside our network...WITHTOU stoppng our pinging
> also. I want us to be able to ping outside, would like the outisde to
> not be able to ping us. Obviously deny icmp any any also kills our
> pinging....
>
> Is there a particular syntax or port?
>
> Blake
>
> ___________________________________
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
