[FW-1] unknown estab packet and objects.C/table.def

[Mark Pace Balzan <mpb@FW1-NOSPAMMELITACABLE.COM>]

Hi All,


I seem to be suffering from what looks like a common issue on FW1 4.1
May unknown established tcp packet in the logs especially for mail server
traffic.

>From research Ive done, it looks like I need to modify objects.C and
table.def from defaults of 60.
I was considering 90 - 120 instead.

Since I will have to restart the firewall I will be doing this during our
maintenance window, so I'd like to make sure that I've got all the correct
info beforehand

- What values are people that solved this problem using ? (instead of 60)
- Is it tcpstarttimeout in objects.C and TCP_START_TIMEOUT in table.def the
only parameters I need to modify ?
- What about tcpendtimeout in objects.C
- Any other recommendations ?

Thanks


Mark

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================