Re: [FW1] Logs messages, I'm confused ??

["John Gesualdi" <jgesuald@FW1-NOSPAMprojo.com>]

I found the answer to my problem. I had syn-defender enabled in FW properties.
Turning this off resolved my problem. I later turned it back on after bumping up the
connections from 5000 to 10000. My logs are clean now.



John Gesualdi wrote:

> I'm running FW1 4.0 SP5 on a Nokia. I have a Web server in my DMZ, I'm noticing
> allot of rejects in my logs for this web server. They look like these and I'm
> getting a whole bunch. The weird thing is that my site is up and I have not
> gotten any complaints from users trying to access it.
>
> 21:59:59 drop   frt     >eth-s1p1c0 proto tcp src d181820ad.rochester.rr.com dst
> www service http s_port 2439 len 48 rule 59
>
> 21:59:59 drop   frt     >eth-s1p1c0 proto tcp src cache-dg09.proxy.aol.com dst
> www service http s_port 50655 len 48 rule 59
>
> The FW1  log viewer shows these coming from "daemon" and rule 0. Can someone try
> to explain this. I'm concerned that I may be losing hits. Thanks very much.
>
> --
> John Gesualdi
> The Providence Journal Company
> Phone> Pager> CCDP,CCNP
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================

--
John Gesualdi
The Providence Journal Company
phonepagerCCDP,CCNP




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================