[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] AW: [FW1] firewall log messages
Hi, I have the same Problem with the land_attack. Since I has update the FW-1 on NT 4.0 SP6 to the SP4 the alert appears in the log, if broadcast into our DMZ´s (consist of several Subnetworks) transmits. Andre -----Ursprüngliche Nachricht----- Von: Holland, Stephen [mailto:[email protected]] Gesendet: Dienstag, 14. August 2001 19:06 An: Josef Klapsch; [email protected] Betreff: RE: [FW1] firewall log messages It when a packet is destined for a device but sourced from that device. Variables Client 10.10.10.10 Sever 11.11.11.11 Client spoofs 11.11.11.11 and send a packet destined for 11.11.11.11 which results in a loop back condition and could cause the server to slow or stop. This is a CPMAD IDS function. Some say CPMAD works some (even checkpoint) don't recommend CPMAD. -----Original Message----- From: Josef Klapsch [mailto:[email protected]] Sent: Friday, August 10, 2001 4:05 AM To: [email protected] Subject: [FW1] firewall log messages Hi, does anyone now what these messages in the firewall log mean? "130" "9Aug2001" " 0:09:35" "accept" "" "" "" "ip" "" "" "" "" "" "" "" "" "MAD" " additionals: attack=land_attack" "131" "9Aug2001" " 0:09:35" "accept" "" "" "" "ip" "" "" "" "" "" "" "" "" "MAD" " additionals: attack=land_attack" our config: Winnt 4.0 SP6a modul and management Firewall 1 SP4 incl. Hotfixes fmt and rdp vpn accelerator card thanks in advance Josef ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|