ICMP Packets not reaching FW despite rule.

[BenRad]

I've set up a rule to allow ICMP requests to our Nokia FW from a specific host (a network mapping application at another site). Despite placing the rule above the Stealth rule, the application is still unable to ping the FW. I see that the FW is dropping ICMP packets from the server in question, with the "Address Spoofing" error message. Any ideas how I can get this to work?

In Global Properties, I have "Accept ICMP Requests: First."

I'm using CheckPoint Express.

Thanks.

[chillyjim]

[i]Address Spoofing[\I] is controled by the "topology" section in the gateway object. Doing a "get with topology" should set the interfaces correctly