[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW1] NAT fails on adhoc basis - Anybody encountered this before ?
do you have any "halloc failed blah blah" in you fwd.elg? maybe you run out of kernerl memory, you can try to increase fwhmen on /etc/system as shown: set fw:fwhmem=0x900000 this number is calculated for my config, i think there is an phoneboy article covering this issue. Raúl. Siow Yun Patricia <[email protected]>@lists.us.checkpoint.com con fecha 03/09/2001 05:59:24 Enviado por: [email protected] De Siow Yun Patricia <[email protected]> @lists.us.checkpoint.com --------+ -----------------------------------------------------+ A --------+ -----------------------------------------------------+ Copias a --------+ -----------------------------------------------------+ CCI --------+ -----------------------------------------------------+ Fecha 03/09/2001 05:59 --------+ -----------------------------------------------------+ Tema [FW1] NAT fails on adhoc basis - Anybody encountered this before ? --------+ -----------------------------------------------------+ Hi all ! Have any administrators encouter this problem before ? Setup : Checkpoint 4.1 sp4 on pair of Sun Ultra 10s Solaris 7. Implements stonebeat fullcluster for HA and load balancing solution. Implements VPN with use of SecuRemote. Problem : NAT fails without reason adhoc basis. Noticed that after pushing out the same policy with minor changes to the firewall many times (during testing). NAT fails to work even though it has previously worked before. What's odd is that after creating a new rulebase and creating a set of rules and NAT exactly the same as before. Pushed it out to the nodes again. NAT works. Are there any state files or config files to remove and check without the need to re-create a new policy everytime ? Thanks in advance. Rgds, Patricia ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================ ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|