Craig Johnson wrote...
> Not really - icmp is a funny beast, and those filters have caused me

> lot of problems. I just use a non-stateful ICMP exception from any

> any if I want more than outbound ICMP traffic. You might try
> non-stateful exceptions with source & destination addresses tied


Do you just add it temprarily as needed for trouble shooting??

I am having a hell of a time getting an outbound icmp exception to
work on a
regular basis. The firstone I set up was a stateful icmp from private
public and it worked for about a week and then would drop about 50% of
packets. Now it won't work at all unless I turn off filtsrv...

Any suggestions are always appreciated....

Ed Kasky
Los Angeles, CA
.. . . . . . . .
"I am certain that He (God) does not play dice."
-- Albert Einstein