RE: [FW1] New worm on the road?

["Joe Pampel" <joe@FW1-NOSPAMardsley.com>]

Hi - 

I'm not on a 12.1 release anyhow, but thanks all the same!  My fundamental issue is that I when using various URI filters in CP it kills lots of my normal user traffic. I am very specific in my URI's, but yet things like the Netscape homepage won't come up and I get that "Access denied at FW-1 <fwname>.    BTW - how do I change that message?
I need to get a clean rule in there that won't mess with normal wanted traffic or make my phones ring off the wall with "the internet is down" calls.. I'm using the one right off the checkpoint website  (sk7473) but am going to have to keep tweaking it until I can find some happy medium..

Thanks,

Joe

>>> "Lars Troen" <lars.troen@proxycom.no> 09/24/01 03:24AM >>>
Joe,
This might not be such a good idea (depending on the trafic at your site).
This is *very* cpu intensive and might make your router unstable.

Lars

> -----Original Message-----
> From: owner-fw-1-mailinglist@lists.us.checkpoint.com 
> [mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of Kim
> ARAGON
> Sent: Saturday, September 22, 2001 00:39
> To: Joe Pampel
> Cc: fw-1-mailinglist@beethoven.us.checkpoint.com;
> owner-fw-1-mailinglist@beethoven.us.checkpoint.com;
> Patrick.Coomans@4all.be 
> Subject: Re: [FW1] New worm on the road?
>
>
> Maybe this will help?
>
> http://www.cisco.com/warp/public/63/nimda.shtml 
>
> Good luck.




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================