am i doing this correctly?

dunkyb · 02-06-2003, 09:05 AM

Yes..

But I am assuming that codes such as destination unreachable will be included in RELATED.....

Am i right?

Duncan

jharris · 02-06-2003, 09:31 AM

No - it'll be a message sent from a upstream router back *TO* you. I think

cheers

Jamie...

dunkyb · 02-06-2003, 03:45 PM

yeah, but it will still be RELATED to the outbound connection, so should be accepted by the RELATED rule, right?

jharris · 02-07-2003, 02:11 AM

I'm not sure about this as the ICMP message will be using a different protocol etc etc to your out going message. I'd say give it a go - try to use a host that doesn't exists and see what happens.

cheers

Jamie...

dunkyb · 02-07-2003, 02:52 AM

well, it all seems to work ok .. often web pages stop loading half way through, then continue a bit later on .. but i am sure this is down to NTL's transparent proxies?!...

This is why i have been thinking twice about the firewall.. although i believe it to be fine.

I have browed to lots of unreachable sites, and IE just shows a DNS error...

Duncan