RE: [FW1] fw_xlate_forw Error on FW-1

[Alex.Barenbaum@FW1-NOSPAMVerizonWireless.com]

I was only able to find the following article that I thought was close:
allocate_port: could not find a free port
Unfortunately, this is not the exact issue that we are experiencing.  If
there's another article that may apply, but I haven't found it, I'd really
appreciate it if you would forward it to me.

Thanks in advance,
	Alex

-----Original Message-----
From: Day Dreamer [mailto:jmansukh@yahoo.com]
Sent: Friday, May 04, 2001 12:09 AM
To: Alex.Barenbaum@VerizonWireless.com; ayltonsz@websecret.com.br;
c_barenal@bam.com; fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: RE: [FW1] fw_xlate_forw Error on FW-1


I think www.phoneboy.com stated that might be due to a
general NAT rule that is trying to NAT out certain
type  of traffic (i.e. UDP) that cannot be NAT'ed.

J

--- Alex.Barenbaum@VerizonWireless.com wrote:
> 
> Technically we have 2 class B networks behind the
> NAT, but in practice, we
> only have 2k-3k connections at anytime.  Not all
> those IPs are in use, and
> not all of them are NAT'ed.  
> 
> One more note that might be pertinent, this box has
> 320 Megs of Ram.
> 
> Thanks again for the help,
> 	Alex
> 
> -----Original Message-----
> From: Aylton Souza, CISSP
> [mailto:ayltonsz@websecret.com.br]
> Sent: Tuesday, May 01, 2001 10:30 PM
> To: Alex.Barenbaum@VerizonWireless.com;
> fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject: Re: [FW1] fw_xlate_forw Error on FW-1
> 
> 
> hm.. how many IPs behind your NAT HIDE do you have?
> 
> 
> ----- Original Message -----
> From: <Alex.Barenbaum@VerizonWireless.com>
> To: <fw-1-mailinglist@beethoven.us.checkpoint.com>
> Sent: Friday, April 27, 2001 4:53 PM
> Subject: [FW1] fw_xlate_forw Error on FW-1
> 
> 
> >
> > Hello all,
> > We are experiencing the following error.  It is
> happening on a
> pair(primary
> > as far as I can tell) of Nokia IP650's running in
> HA via Monitored Circuit
> > VRRP.  It is FW-1 4.0 SP4(Don't ask), IPSO 3.2.1 
> Our connection table
> only
> > has about 3000 connections.
> >
> > We have not been able to figure out this error. 
> We have looked at the
> Nokia
> > Resolutions 1503, 649, 1506 with no luck.  If
> anyone knows what the cause
> of
> > this is, we would greatly appreciate the help.
> >
> > "
> > Apr 23 11:06:30 hqbed-nokia01 [LOG_CRIT] kernel:
> FW-1: allocate_port:
> could
> > not
> > find a free port for host c74a9dc9, port 80
> > Apr 23 11:06:30 hqbed-nokia01 [LOG_CRIT] kernel:
> FW-1: fw_xlate_forw:
> failed
> > to
> > initialize the connection
> > Apr 23 11:06:30 hqbed-nokia01 [LOG_CRIT] kernel:
> FW-1: allocate_port:
> could
> > not
> > find a free port for host c74a9dc9, port 80
> > Apr 23 11:06:30 hqbed-nokia01 [LOG_CRIT] kernel:
> FW-1: fw_xlate_forw:
> failed
> > to
> > initialize the connection
> > "
> >
> > TIA,
> > Alex
> >
> >
> >
> >
> >
> >
> >
>
============================================================================
> ====
> >      To unsubscribe from this mailing list, please
> see the instructions at
> >               
> http://www.checkpoint.com/services/mailing.html
> >
>
============================================================================
> ====
> >
> >
> 
> 
>
============================================================================
====
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================