|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] what is port scan ?cannot to FWbox after properties change SOS!!
Hi.. Dear Gibson, Jesus and all
Sorry I haven't read your mail before I made the change. (uncheck Accept VPN
and Firewall connection and I also uncheck the Accept ICMP) Now I found I
cannot connect to my sun fw in tokyo using GUI client. But I still can
telnet into sun box and check the deamon is running and policy is taking
effect but just connect to it using GUI client.
Can I ask
1)Whether we can still open the fwpolicy (FWGUI) using the console to undo
it. I cannot physically access the SUN box as I am not in Tokyo but I think
of ask somebody help?
2)If we cannot connect using console GUI. how are we going to undo it? Can
do it using command line??
3)When we made the management properties, when does it take effect? After
clicking the OK button?? or I need to reinstall the current policy? why I
seems like losing connection after I resinstall policy
4)I have another firewall and I also uncheck the "ACCEPT Firewall-1 control
connections. But we still can connect using Client GUI, but I found the
difference is their entry
The one which Cannot connect, the entry is as follow
APPLY GATEWAY Rules to Interface Direction :Eitherbound
The one still Can connect, the entry is as follow
APPLY GATEWAY Rules to Interface Direction :Inbound
What is mean by inbound and outbound? The firewall in between the internet
and local LAN, so What is in/outbound refer to??
Pls help if u know SOS
From: "Gibson, Brian" <[email protected]>
To: 'David Gollop' <[email protected]>, [email protected]
CC: [email protected]
Subject: RE: [FW1] what is port scan ? our IT auditor found hole!! How to
close??
Date: Tue, 20 Mar 2001 07:18:58 -0500
Go to your management station properties and turn off Accept FW-1
connectios. Be aware, however, that you need to set up a rule for those
services so that your management station can properly connect to the bo or
you will not be able to access the FW box after the change.
-----Original Message-----
From: David Gollop [mailto:[email protected]]
Sent: Tuesday, March 20, 2001 12:58 AM
To: [email protected]
Cc: [email protected]
Subject: Re: [FW1] what is port scan ? our IT auditor found hole!! How
to close??
Hi.. Jesus Calvo and dear all... if this is the case, how to close this two
port.. as we don't implement VPN here and I remember that there is no rules
for 264, 265 ports. Why it is open?
David
>From: "Jesus Calvo Hernandez" <[email protected]>
>To: "David Gollop" <[email protected]>
>CC: "FW1-MailingList \(E-mail\)"
<[email protected]>
>Subject: Re: [FW1] what is port scan ? our IT auditor found hole!!
>Date: Mon, 19 Mar 2001 13:15:38 +0100
>
>
>HI
>
>fw-1 uses these ports for vpn key exchangement; so if you´ve got a vpn
to
>another fw-1 or to securemote users they must be open in order to permit
>key
>exchanges over the internet.
>
>regards
>
>
>----- Original Message -----
>From: "David Gollop" <[email protected]>
>To: <[email protected]>
>Sent: Monday, March 19, 2001 11:06 AM
>Subject: [FW1] what is port scan ? our IT auditor found hole!!
>
>
> >
> > Hi..
> >
> > 1)My IT auditor told me she run a port scan product on the internet
and
>scan
> > our firewall internet IP and found our firewall port 264, 265 are
opened
> > Why?? why it is opened?? What is port scan and where to download?
> >
> > I found these port are as follows, what is the function of that??
> >
> > bgmp 264/tcp BGMP
> > bgmp 264/udp BGMP
> > #
> > Dave Thaler <[email protected]>
> > x-bone-ctl 265/tcp X-Bone CTL
> > x-bone-ctl 265/udp X-Bone CTL
> >
> > 2)How to set the alert on checkpoint? how can we set the condition
for
>the
> > alert to decide when and what to alert?
> >
> > Thanks
> > David
> >
>_________________________________________________________________________
> > Get Your Private, Free E-mail from MSN Hotmail at
>http://www.hotmail.com.
> >
> >
> >
> >
>===========================================================================
=
>====
> > To unsubscribe from this mailing list, please see the
instructions
>at
> > http://www.checkpoint.com/services/mailing.html
> >
>===========================================================================
=
>====
>
>------------------------------------------------------------------
>This email is confidential and intended solely for the use of the
>individual to whom it is addressed. Any views or opinions presented are
>solely those of the author and do not necessarily represent those of Sema
>Group.
>If you are not the intended recipient, be advised that you have received
>this email in error and that any use, dissemination, forwarding,
printing,
>or copying of this email is strictly prohibited.
>------------------------------------------------------------------
>
>
>
>===========================================================================
=====
> To unsubscribe from this mailing list, please see the instructions
at
> http://www.checkpoint.com/services/mailing.html
>===========================================================================
=====
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
|
|