|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Nimda rule (URI resource matching) makes file-uploading fail
its peculiar but if you use the "not your_network" or "your_network" .. the action "drop" will fail to produce desired results(dropping nimda attacks). change "drop" to "reject". If you use "ANY" ... "drop" will work. not sure why this is.. but its how I got it to work. Also other notes.. if there are spaces or "@" in the URL .. they will probably be dropped by the security server because it can't handle them.. and if you have tunneling checked.. be ready for folks to use your firewall as a launch pad for spam and other nonsence... Jonathan Higgins Network Service Specialist IV [email protected] >>> [email protected] 02/28/02 10:55AM >>> Jerry wrote: > Apparently, we can't use Nimda rule without using > "ANY" since the only way to block inbound Nimda hack > from Internet is using "ANY" as "Source". Try having two rules as follows: not your_network --- your_network --- http->Nimda_URI --- drop your_network --- not your network --- http->Nimda_URI --- drop Where your_network is a group that encompasses any internal networks and DMZ networks. To get the 'not your_network', enter your_network and then choose the negate option. That way, your internal to DMZ and vice versa won't be affected by the Nimda rule as it is effectively your_network to your_network. Hope this helps. Paul Toyne CCSA/CCSE ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
