NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW1] Rule 0



Hi,
even if you don't install Anti-Spoofing you may get drops by rule 0.
This may be the case if you have checked logging for IP packets with entries in the
Options field in the header or - esp. 4.1 SP2 - if there are packets with ACK set
that the FW doesn't "know" in it's State Tables (reason: Unknown established TCP
packet).
Take a look in the Log Viewer's Info field on the very right side. In most of the
cases you get further information here.
Hope it helps
Best regards
Matthias


Estela Ruiz wrote:

> Hi,
>
> I haven't got implemented the Anti-Spoofing in my Firewall-1 v4.1, and I can
> see dropped packets by rule 0.
> How is it possible?
>
> Thanks in advance,
> Estela.
> _________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
begin:vcard 
n:Leu;Dr. Matthias 
tel;cell:tel;fax:+49 8102 895 199
tel;work:+49 8102 895 190
x-mozilla-html:FALSE
org:AERAsec Network Services and Security GmbH
adr:;;Wagenberger Strasse 1;D-85662;Hohenbrunn;;
version:2.1
email;internet:[email protected]
fn:Dr. Matthias Leu
end:vcard


 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.