NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] NBT logging



Devon

Put it at the TOP of the rulebase before your stealth rule etc.

Richard
Devon Harding - GTHLA wrote:

All NBT stuff still seems to be logging and not relating to any rules.

My rule (second to last) is as follows:

Source  Dest.           Service Action  Track
Any             Any             NBT             Drop            None

The NBT packets are dropped but are still logged.

-Devon


-----Original Message----- From: Hal Dorsman [mailto:[email protected]] Sent: Wednesday, June 19, 2002 11:21 AM To: [email protected] Subject: Re: [FW-1] NBT logging

Create a "Garbage" service group.  Put stuff you always see on
lans (nb*, dhcp, bootp, etc), and put it before your other rules and
don't log it.

Do you have a reason to pass this stuff to the outside?  Unless
you have remote lans that need to browse your network, I would drop
all nb* stuff.

Hal



-----Original Message-----
From: Devon Harding - GTHLA [mailto:[email protected]]
Sent: Wednesday, June 19, 2002 8:44 AM
To: [email protected]
Subject: [FW-1] NBT logging


How do I stop NBT services (nbname & nbdatagram) from logging in NG without dropping or rejecting the packets?

I'm getting 'message_info address spoofing' under Info in fw.log

_____________________
Devon Harding
System Administrator
Gilat Latin [email protected]

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================




================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================








______________________________________________________________________


First Option's outgoing email policy is at
http://www.firstoption.com/emailpolicy.html, but a short summary is :-

- all email/attachments are confidential; do not use, circulate or release
without our consent

- email is not authorised unless it is on First Option business

- email is not binding unless it is from an authorised person
and is signed with a digital certificate

First Option Ltd. - Switchboard +44 (0) 1962 738200
Signal House, Jacklyns Lane, Alresford, Hants, SO24 9JJ, United Kingdom
_______________________________________________________________________

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.