RE: [FW1] Anti-spoofing, loading rules and license problem

[Jorn.Dahl-Stamnes@FW1-NOSPAMnovit.no]

# fw printlic
This is VPN-1(TM) & FireWall-1® Version 4.0 ( 1Jun2001 12:01:44)

Type             Expiration Ver Features
..xx.xx    Never      4.x control pfm
xxx.xxx.xx.xx    Never      4.x encul ca vpndes
xxx.xxx.xx.xx    Never      4.x encul ca vpn srmedium
xxx.xxx.xx.xx    Never      4.x control pfm

Note, we got two different license, since the first unlimited license key
was valid only for a year or so.

We have several thousand machines behind the FW.

---
Jørn Yngve Dahl-Stamnes
EDB Teamco, Trondheim
Jorn.Dahl-Stamnes@novit.no 

> -----Original Message-----
> From: Aylton Souza, CISSP [mailto:ayltonsz@websecret.com.br]
> Sent: 31. mai 2001 22:45
> To: Jorn.Dahl-Stamnes@novit.no;
> fw-1-mailinglist@beethoven.us.checkpoint.com
> Subject: Re: [FW1] Anti-spoofing, loading rules and license problem
> 
> 
> John,
> 
> Can you reproduce the result of fw printlic (please remove 
> the IP address /
> host id)  and tell me how many hosts you have behind each interface?
> 
> 
> Best regards
> 
> Aylton
> ----- Original Message -----
> From: <Jorn.Dahl-Stamnes@novit.no>
> To: <fw-1-mailinglist@beethoven.us.checkpoint.com>
> Sent: Thursday, May 31, 2001 8:31 AM
> Subject: [FW1] Anti-spoofing, loading rules and license problem
> 
> 
> >
> > Had a strange situation yesterday on a FW-1 4.0 on HP-UX 
> 10.20 running
> both
> > FW-1 managment module and FW-1 gateway module.
> >
> > The firewall have one connection to the internet, one to 
> our internal
> > network and three DMZ zones.
> >
> > For each DMZ interface, I changed the property settings:
> >
> >   Old setting: Valid addresses: Any + Spoof Tracking: None
> >   New setting: Valid addresses: This net + Spoof tracking: Log
> >
> > Then I reinstalled and lost connection. I ran the GUI from 
> the internal
> > network.
> >
> > At the HP consol I took a "fwstop" and then a "fwstart". It 
> failed to load
> > the ruleset. I then took a "shutdown -r now". When FW-1 was 
> starting, it
> > complained that there was too many internal hosts - only 25 
> was allowed,
> and
> > it came with a dump of IP-addresses. And it could not load 
> the ruleset.
> >
> > We have a unlimited license on this machine.
> >
> > After reboot, I manually edited objects.C and reset the interface
> properties
> > for the three DMZ interfaces to "Valid addresses: Any" and 
> then compiled
> and
> > loaded the ruleset without any problems. I also rebooted 
> the machine and
> it
> > did not longer complain about too many internal hosts.
> >
> > This sounds like a bug in the software? Comments?
> >
> > ---
> > Jørn Yngve Dahl-Stamnes
> > EDB Teamco, Trondheim
> > Jorn.Dahl-Stamnes@novit.no
> >
> > > -----Original Message-----
> > > From: Mika Napari [mailto:mika.napari@siemens.fi]
> > > Sent: 17. mai 2001 13:04
> > > To: Jorn.Dahl-Stamnes@novit.no;
> > > fw-1-mailinglist@beethoven.us.checkpoint.com
> > > Subject: RE: [FW1] SecureRemote and Windows 2000
> > >
> > >
> > > Hi,
> > >
> > > I think you have wrong version of SecuRemote.
> > > You should use:
> > > VPN+Des SecuRemote 4.1 build 4176 for Windows 2000 or
> > > VPN+Strong SecuRemote 4.1 build 4176 for Windows 2000
> > >
> > > which you can download from
> > > http://www.checkpoint.com/techsupport/freedownloads.html
> > >
> > > --
> > > Mika Napari / Siemens / IT Service
> > > email: mika.napari@siemens.fi
> > > tel: +358 10 511 5151
> > >
> > >
> > > > -----Original Message-----
> > > > From: owner-fw-1-mailinglist@lists.us.checkpoint.com
> > > > 
[mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of
> > > Jorn.Dahl-Stamnes@novit.no
> > > Sent: 16. toukokuuta 2001 13:01
> > > To: fw-1-mailinglist@beethoven.us.checkpoint.com
> > > Subject: [FW1] SecureRemote and Windows 2000
> > >
> > >
> > >
> > > I'm trying to install SecureRemote on Windows 2000. But I get
> > > this message:
> > >
> > >
> > > Incompatible NT
> > > Version SP4 or higher required
> > >
> > > I'm installing from CheckPoint 2000 Enterprice Suite (version 4.1).
> > >
> > > Isn't SecureRemote supported under Windows 2000?
> > >
> > > ---
> > > Jørn Yngve Dahl-Stamnes
> > > EDB Teamco, Trondheim
> > > Jorn.Dahl-Stamnes@novit.no
> > >
> > >
> > > ==================================================================
> > > ==============
> > >      To unsubscribe from this mailing list, please see the
> > instructions at
> > >                http://www.checkpoint.com/services/mailing.html
> > > ==================================================================
> > > ==============
> > >
> > >
> >
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================