|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] NG: packet out of state
Happy New Year On another follow up note to Fitz's post. When running NAT on CPNG I get an error message in the logs "the_flags 2 message_info_TCP packet out of state" Im running Checkpoint NG on NT4 SP6a (Test LAb environment) I am testing static NAT between two firewalls. fw.madrid.cp and fw.rome.cp Each firewall has a web server sitting behind it on a private network. I have created all the correct objects on each firewall and everything works as expected untill Static NAT rules are applied I may be missing something obvious but any assistance would be most helpful. -----Original Message----- From: David Shimamoto [mailto:[email protected]] Sent: 02 January 2002 14:24 To: [email protected] Subject: Re: [FW-1] NG: packet out of state Greetings and Happy New Year, This is a follow-up question to Fitz's post. The advantage of what he wants to do is that the number of log entries will be reduced, however, the disadvantage is that any packet will be able to initiate a connection including ACK's. Is there any advantage to doing what Fitz wants done besided reducing the number of log entries. Thanks, Dave At 02:39 PM 1/2/02 +0100, fitz wrote: >Hello to all, > >I am currently upgrading from 4.1 to NG. And I now have an old problem >(unknown established tcp packet). The solution from 4.1 (ALLOW_NON_SYS....) >doesn't work under NG, this macro doesn't exist in fwui_head.def. > >So I found in the mailinglist from [email protected] following: > > >In the NG the setting is located on Solaris in /etc/system: set >fw:fw_allow_out_of_state_tcp = 1 > > >But I use RH6.2 and doesn't find this entry in my system, so can anyone help >me? And what is with udp? > >best regards fitz > >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [email protected] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[email protected] >================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
