[FW-1] Service entries

["Sundstrom, Peter" <Peter@FW1-NOSPAMISECURE.COM.AU>]

For as long as I can remember, FW1 has a problem with the service names.
Its behaviour is inconsistent in what it chooses to resolve a port name to.
Sometimes it uses an /etc/services entry, sometimes its own service entry
and sometimes mixes the two.

Needless to say, it stuffs up reporting, as the mail may get logged as
'mail', or 'smtp' or maybe even '25'.

My current reports show two names in the same log for udp(53).  It resolves
it to 'domain' (from /etc/services) and 'domain-udp' (from FW1 objects).  I
switch the logs hourly, and report daily.  I suspect that each time FW1
switches the logs it "randomly" decides whether to use a /etc/services or
services object.

I've searched a few FAQ's and mailing lists and have seen other people
report it, but didn't find any solutions.

I'm using FW1 4.1, so I don't know if this problem has been fixed in the
later versions.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================