RE: [FW1] too many hosts ... ?

[Gill <jamgill@FW1-NOSPAMUU.NET>]

use "fw lichosts" to see what you have spent your licenses on.  The
comment to rm $FWDIR/database/fwd.h & $FWDIR/database/fwd.hosts was on
target if you simply wanted to clear your license count.  That's probably
a good idea to start ... then run "fw lichosts" and look for addresses
that are not internal to your network.  If you have external addresses in
that list, you've probably got something misconfigured.

Check the external.if file, i think it is in $FWDIR/conf/, and make sure
that it contains the interface *name* of your public or external
interface.  You can also see this error if your network is incorrectly
configured with another path in/out...  but at that point you should
probably close down the policy editor and load Visio to work on the real
problem ;-)

hth,

--gill

On Wed, 21 Feb 2001, Christoph Nagelreiter wrote:

> Date: Wed, 21 Feb 2001 15:47:55 +0100
> From: Christoph Nagelreiter <Nagelreiter@RSLCOM.AT>
> To: fw-1-mailinglist@lists.us.checkpoint.com
> Subject: RE: [FW1] too many hosts ... ?
> 
> 
> 
> We have 80 hosts.
> 
> I found many ip addresses in my syslog file:
> 
> 	- internal addresses
> 	- many official ip addresses ?????? (dns server, etc)
> 
> Does my fw-1 add internal and offical addresses? (Maybe this explains the
> huge host number of 280)
> 
> 
> Chris
> > -----Original Message-----
> > From: andrew.2.shore@bt.com [mailto:andrew.2.shore@bt.com]
> > Sent: Wednesday, February 21, 2001 3:02 PM
> > To: Nagelreiter@RSLCOM.AT; fw-1-mailinglist@lists.us.checkpoint.com
> > Subject: RE: [FW1] too many hosts ... ?
> > 
> > 
> > 
> > but how many host do you have ?
> > 
> > 
> > Andrew Shore
> > BTcd 
> > Information Systems Engineering
> > Internet & Multimedia 
> > 
> > 
> > -----Original Message-----
> > From: Christoph Nagelreiter [mailto:Nagelreiter@RSLCOM.AT]
> > Sent: 21 February 2001 13:36
> > To: Secure 1 Mailing List (E-Mail)
> > Subject: [FW1] too many hosts ... ?
> > 
> > 
> > 
> > Hi All,
> > 
> > Daily i am getting syslog messages (kernel notice) from my 
> > fw-1, that too
> > many hosts have been detected ( > 280 hosts). 
> > I have a licence for 100 hosts. 
> > 
> > My fw-1 works great, but what does this syslog message mean?
> > 
> > Regards,
> > 
> > Chris
> > 
> > 
> > 
> > 
> > ==============================================================
> > ==============
> > ====
> >      To unsubscribe from this mailing list, please see the 
> > instructions at
> >                http://www.checkpoint.com/services/mailing.html
> > ==============================================================
> > ==============
> > ====
> > 
> > 
> > ==============================================================
> > ==================
> >      To unsubscribe from this mailing list, please see the 
> > instructions at
> >                http://www.checkpoint.com/services/mailing.html
> > ==============================================================
> > ==================
> > 
> 
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
--gill  | Tatu Ylonen, SSH 1.2.12 README:  "Beware that the most effective
        | way for someone to decrypt your data may be with a rubber hose."




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================