Hi all, I know that it's not an specific FW-1 info but I suppose it can be of interest to many of you. I released a tool to test ICMP implementations called SING. SING its a ping replacement that have many improvements over the ping command: - Send/read spoofed packets with libpcap included in source distribution. - Send many ICMP information types (Echo as the old ping, Timestamp, Address Mask, Router Discovery, etc.) - Send many ICMP error types (Redirect, Unreach, etc.) - Fragment the ICMP packet. - Send monster packets (> 65535) - Use Loose Source Routing, Strict Source Routing and Record Routing. - Use inexistent codes. etc. It works on Linux, BSD and Solaris (except fragment and monster :) ). Linux recommended. I hope this tool can help you to evaluate/improve your firewall ICMP rules, in fact I used it to test our FW-1. http://www.sourceforge.net/projects/sing Cheers, Alfredo. ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
