RE: [FW1] FW-Error allocate_port

["Goetz, Jarrett" <JGoetz@FW1-NOSPAMJenzabar.net>]

Title: FW-Error allocate_port

I think I have seen this before.  Do you have HIDE NAT running?

 

I am assuming so.  What I think is happening here is the way FW1 picks source ports.  If it is high source port it picks a high port, and consequently if a low source port it picks a low port.  So something is translating on one of the NETBIOS ports and it is running out of ports.

 

If this is the case and you need whatever app to be doing whatever it does, you can modify the kernel to pick lows from highs, etc....

 

Let me know what other info you need.

 

Jarrett

-----Original Message-----
From: METE EMINAGAOGLU (IT) [mailto:mete.e@digiturk.net]
Sent: Wednesday, May 09, 2001 08:26
To: fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: [FW1] FW-Error allocate_port
Importance: High

Hi to all.

This log record had been continuously recorded for about 40 minutes within over 100 repetitions. The Firewall went down aftermath. We had to manually reboot it.

May 9 14:34:28 dtfirewall01 [LOG_CRIT] kernel: FW-1: allocate_port: could not find a free port for host d4fcaa0a, port 137
May 9 14:34:28 dtfirewall01 [LOG_CRIT] kernel: FW-1: fw_xlate_forw: failed to initialize the connection

Has anyone got an idea? What's this error and what might have caused it?  The firewall module we're using is Nokia IP650 IPSO 3.3