[BenRad]

I've set up a rule to allow ICMP requests to our Nokia FW from a specific host (a network mapping application at another site). Despite placing the rule above the Stealth rule, the application is still unable to ping the FW. I see that the FW is dropping ICMP packets from the server in question, with the "Address Spoofing" error message. Any ideas how I can get this to work?

In Global Properties, I have "Accept ICMP Requests: First."

I'm using CheckPoint Express.

Thanks.