RE: [FW1] fw_xlate_forw Error on FW-1

[Alex.Barenbaum@FW1-NOSPAMVerizonWireless.com]

Technically we have 2 class B networks behind the NAT, but in practice, we
only have 2k-3k connections at anytime.  Not all those IPs are in use, and
not all of them are NAT'ed.  

One more note that might be pertinent, this box has 320 Megs of Ram.

Thanks again for the help,
	Alex

-----Original Message-----
From: Aylton Souza, CISSP [mailto:ayltonsz@websecret.com.br]
Sent: Tuesday, May 01, 2001 10:30 PM
To: Alex.Barenbaum@VerizonWireless.com;
fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: Re: [FW1] fw_xlate_forw Error on FW-1


hm.. how many IPs behind your NAT HIDE do you have?


----- Original Message -----
From: <Alex.Barenbaum@VerizonWireless.com>
To: <fw-1-mailinglist@beethoven.us.checkpoint.com>
Sent: Friday, April 27, 2001 4:53 PM
Subject: [FW1] fw_xlate_forw Error on FW-1


>
> Hello all,
> We are experiencing the following error.  It is happening on a
pair(primary
> as far as I can tell) of Nokia IP650's running in HA via Monitored Circuit
> VRRP.  It is FW-1 4.0 SP4(Don't ask), IPSO 3.2.1  Our connection table
only
> has about 3000 connections.
>
> We have not been able to figure out this error.  We have looked at the
Nokia
> Resolutions 1503, 649, 1506 with no luck.  If anyone knows what the cause
of
> this is, we would greatly appreciate the help.
>
> "
> Apr 23 11:06:30 hqbed-nokia01 [LOG_CRIT] kernel: FW-1: allocate_port:
could
> not
> find a free port for host c74a9dc9, port 80
> Apr 23 11:06:30 hqbed-nokia01 [LOG_CRIT] kernel: FW-1: fw_xlate_forw:
failed
> to
> initialize the connection
> Apr 23 11:06:30 hqbed-nokia01 [LOG_CRIT] kernel: FW-1: allocate_port:
could
> not
> find a free port for host c74a9dc9, port 80
> Apr 23 11:06:30 hqbed-nokia01 [LOG_CRIT] kernel: FW-1: fw_xlate_forw:
failed
> to
> initialize the connection
> "
>
> TIA,
> Alex
>
>
>
>
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================