[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] SMTP and Unknown Established TCP packet
As I said, I suggest the increase of the time-out value only as a
workaround. I should add it should be a *temporary* workaround.
It is not advisable to leave that value at 300s, since I'd say that makes
the box more vulnerable to DOS attacks due to overflow of the FW's
connection table (SYN flooding, for example).
I recommend you try to verify whether there are network-related problems
involved. I quote:
If you want to make sure, download VisualRoute, install it on a laptop and
place it just outside the FW with a public IP. Then point VR to some of
the
problematic sites and you may eventually see routing loops or long delays
on
specific links on the way to them. They have a handy 30d eval version at
http://www.visualware.com/download/index.html.
Hope that helps!
Regards,
J.
Thanks James.
U did solve my problem to a greater extent. And increasing the timer
(tcpstarttimeout) to 300 sec did work. but is it advisable to put a such
a large value ? I am little worried there. Anybody has any comments?
_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
