[FW1] rejecting of allowed connections

[Micha Borrmann <micha@FW1-NOSPAMtli.de>]

Hi there,

I see few connections as rejected in my log, but these connections are
allowed! O.k. here are the details:

Source: every host
Dest: a host behind the firewall
Service: an allowed service, f.e. ssh
S_Port: an defined (high) TCP Port with FastMode, f.e. http-proxy (8080)
Action: reject
Rule: the number of the rule, which allows these connection (!)
Info: reason: port belong to service in TCP Fast Mode, port: http-proxy

I understand this, that there is a problem with S_Ports, which are defined
as FastMode Services. A workaround is, to disable the FastMode Option on
these Services, but how I can solve the problem? It sounds similiar to the
ftp Service Port Problem (for myself)
(http://www.phoneboy.com/fw1/faq/0106.html). Have anybody the same
problem?

Bye,
Micha

-- 
see MB6408-RIPE (http://www.ripe.net/cgi-bin/whois?MB6408-RIPE)
for detail contact information



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================