|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Nimda rule (URI resource matching) makes file-uploadin g fail
> its peculiar but if you use the "not your_network" or > "your_network" .. the action "drop" will fail to produce > desired results(dropping nimda attacks). change "drop" to > "reject". If you use "ANY" ... "drop" will work. I guess this is the same as was posted about another service the other day (SMTP, was it?). In order to check the URL, the connection cannot be merely dropped. The security server needs to establish the connection, in order to read the URL, and can _then_ reject the connection. "Drop" implies never answering a call in the first place. Why it gives you "drop" when using "ANY", I don't know ... Cheers, Anders :) ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
