Netscreen 5XT + allowing incoming ping responses

Posted on 2006-05-12
Last Modified: 2008-03-17
I need to allow ping response so my internal lan boxen can ping internet sites. I understand I need allow ICMP 0,3,11 but I'm having a Dickens of a time figuring out how to do this on a Netscreen. It's making me want to yank this thing out and configure OpenBSD. Can someone please post some sample rules or point me to an online walkthrough? Thanks.
Question by:Dial_tone
    LVL 9

    Expert Comment

    are you using cli or webui?
    LVL 9

    Accepted Solution

    policy from trust to untrust new
    source address any
    dest address any
    service ping
    action permit

    set pol from trust to untrust any any ping permit log
    LVL 9

    Expert Comment

    you really should refference the KB. and th concepts and examples.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
    To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now