Re: [FW-1] NG: packet out of state

[David Shimamoto <dshimamo@FW1-NOSPAMAPPLIEDTHEORY.COM>]

Greetings and Happy New Year,

This is a follow-up question to Fitz's post.  The advantage of what he
wants to do is that the number of log entries will be reduced, however, the
disadvantage is that any packet will be able to initiate a connection
including ACK's.  Is there any advantage to doing what Fitz wants done
besided reducing the number of log entries.

Thanks,

Dave

At 02:39 PM 1/2/02 +0100, fitz wrote:
> Hello to all,
>
> I am currently upgrading from 4.1 to NG. And I now have an old problem
> (unknown established tcp packet). The solution from 4.1 (ALLOW_NON_SYS....)
> doesn't work under NG, this macro doesn't exist in fwui_head.def.
>
> So I found in the mailinglist from eli@xpert.com following:
>
> >In the NG the setting is located on Solaris in /etc/system: set
> fw:fw_allow_out_of_state_tcp = 1
>
>
> But I use RH6.2 and doesn't find this entry in my system, so can anyone help
> me? And what is with udp?
>
> best regards fitz
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================