NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Disabling Flows on Nokia-330 Permanently


  • To: [email protected]
  • Subject: Re: [FW-1] Disabling Flows on Nokia-330 Permanently
  • From: "Grabowski, David" <[email protected]>
  • Date: Thu, 4 Apr 2002 09:56:24 -0500
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcHbgHTqO0F9r2Q6SaS54nOpCslmlgAaA+kA
  • Thread-topic: [FW-1] Disabling Flows on Nokia-330 Permanently

Oddly, there was a nokia KB article on this - #4188. It's no longer in
the KB.

In 4.1 SP2, it was an edit to $FWDIR/etc/rd.d/rc.fwload to change
"flowpath" to slowpath"

In 4.1 SP3, the file moved to $FWDIR/etc/rc/rc.fwload

It's probably in the same place in SP4, but I wonder why Nokia pulled
the KB article...

-----Original Message-----
From: Padhu [mailto:[email protected]]
Sent: Wednesday, April 03, 2002 9:00 PM
To: [email protected]
Subject: [FW-1] Disabling Flows on Nokia-330 Permanently



There are some issues with IPSO 3.4 with Checkpoint 4.1 SP4 due to some
disconnect between fw-1 state tables and nokia's
IP flow tables.  Lots of rule 0 drops with unknown established messages
in the log. Looks like their SP5a will fix it.

In the interim, I disabled flows by running ipsofwd slowpath at the
command line. However i would like to know how i can do this
permanently so that it stays after reboot also with ipsofwd slowpath.
Any ideas ?

Cheers,Padhu

#####################################################################################
CONFIDENTIAL: This e-mail, including its contents and attachments, if any, are confidential. It is neither an offer to buy or sell, nor a solicitation of an offer to buy or sell, any securities or any related financial instruments mentioned in it. If you are not the named recipient please notify the sender and immediately delete it. You may not disseminate, distribute, or forward this e-mail message or disclose its contents to anybody else. Unless otherwise indicated, copyright and any other intellectual property rights in its contents are the sole property of Mizuho Securities USA Inc.
     E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission.  If verification is required please request a hard-copy version.
     Although we routinely screen for viruses, addressees should check this e-mail and any attachments for viruses. We make no representation or warranty as to the absence of viruses in this e-mail or any attachments. Please note that to ensure regulatory compliance and for the protection of our customers and business, we may monitor and read e-mails sent to and from our server(s).
#####################################################################################

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.