[FW-1] NBT-happy 4.0SP8 FW-1 on NT

[Russell Washington <russ.washington@FW1-NOSPAMVAULTSENTRY.COM>]

I have a Checkpoint firewall on my watch that is firing off NBT traffic to
the broadcast address on its external interface even though there is *no*
rule that we can find that allows this traffic.  The firewall is not using
its external IP in any hidden NAT rules, express or implied, and in fact it
has no hidden NAT rules at all.

Because the traffic (as best as we can tell) is not going out under any
defined rules, we can't log it to learn anything about how it is being
handled.  In short, we're completely out of ideas.  We even went so far as
to set up rule #1 to *allow* NBT traffic and log it, and nothing shows up in
the log even though other devices are detecting the traffic emanating from
this box.

The box is running Firewall-1 4.0, SP8, on an NT 4.0 server that is
up-to-date on its service packs.  Any suggestions?

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================