Can PIX 506e return port unreachable

Unanswered Question
Oct 29th, 2007


Can PIX 506e return ICMP port unreachable on Linux traceroute with UDP data gram, and if somebody knows how, can you make an example of the access-list how it should be written to allow this response?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
tstanik Fri, 11/02/2007 - 07:12

PIX won't return an ICMP port unreachable message and access lists cannot be configured to make PIX to respond a port unreachable.

soulmaris_79 Fri, 11/02/2007 - 07:29

Is the PIX designed in this way or every firewall can't return ICMP port unreachable.


This Discussion