ICMP Echo Request - only allow certain size packet

[BAM279]

Hi,

I currently have a router configured to only allow ICMP echo request packets of a certain bytesize into the network. Is there any way to accomplish the same task in checkpoint?

I understand that you can create a custom "other" service and type INSPECT code into the "Match" box in the advanced screen , but I have no idea what the code would be. Does anyone on the forum have any idea what code I could ente to allow, say, only ICMP echo request packets of x bytes?

Thanks in advance.

[chillyjim]

You can limit the packet size with SmartDefense, but if you want to say "only pings of 139 bytes" or something like that, yes it will be custom code.

[BAM279]

Got it:

icmp, icmp_type=ICMP_ECHO, icmp_code=0, packetlen=bytesize