NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] 'Exceeded allowed number of internal hosts' while not true.



Hi everyone,

I've got this FW1 4.1, licensed for 25 int. hosts, installed on an NT4.0 +
SP6a with only 4 internal hosts.
Normal operation is fine but every mth. there are a couple of hosts added to
the fw's internal hosts list that shouldn't be. 
Since I only have a license for 25 this limit is reached fairly quickly. 

Doing 'fw lichosts' reveals lines like the following (real addresses have
been replaced):
E100 10/11/2000 20:17> host:4.3.2.1 src:1.2.3.4 dst:11.12.13.14
(an_internal_host (Valid Address)) proto:icmp

As you can see, the host: entry is the reverse of the dst: entry and makes
no sense. Yet it's counted as an internal host (I presume).
The host 'an_internal_host' has a rule to allow icmp.

There's no detailed explanation to be found in the docs about the output of
'fw lichosts'. 

Has anyone come across this? Any idee what could be going on?

Guy Zelck 
EDS, E.Solutions Benelux 
Database- & Unix System Administrator 

Tel: +32 (0)2 - 711.39.43 
Fax : +32 (0)2 - 711.39.47  
Email: [email protected] 

               




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.