Re: [FW1] Spoof Tracking

["Marius .R. Banica" <mariusb@FW1-NOSPAMxor.co.il>]

hi there, simple

internal network - this net - spoof track log
dmz - build a group with ure networks and hosts there put it under
specific - spoof track log
External if - others - spoof track log.

Thats if ure paranoid like myself.. :-)
----- Original Message -----
From: "Thornton, Richard" <Richard.Thornton@isd.csa.scot.nhs.uk>
To: "Firewall-1 Mailing List (E-mail)"
<fw-1-mailinglist@lists.us.checkpoint.com>; "Fw1-Wizards (E-mail)"
<fw1-wizards@phoneboy.com>
Sent: Wednesday, December 06, 2000 4:26 PM
Subject: [FW1] Spoof Tracking


>
> Hi All
>
> Quick Question
>
> I have a simple firewall configuration
>
> 1 firewall with 3 interfaces
>
>
>   Internet
> |
> |
>     Firewall--DMZ
> |
> |
>   Localnet
>
> Assume the Internet IF is valid addresses "Any"
> Assume the DMZ IF is valid addresses "This Net"
> Assume the Localnet IF is valid addresses "This Net"
>
> Question which? if any? interfaces should I turn spoof tracking to log or
> alert, and why?
>
> Many Thanks in advance.
>
> Richard
>
>
> _________________________________________________________________
> Common Services Agency Disclaimer
>
> The information contained in this message may be confidential
> or legally privileged and is intended for the addressee only.
> If you have received this message in error or there are any
> problems please notify the originator immediately.
> The unauthorised use, disclosure, copying or alteration of this
> message is strictly forbidden.
> _________________________________________________________________
>
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================