NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] SAM question


  • To: [email protected]
  • Subject: Re: [FW-1] SAM question
  • From: Lars Troen <[email protected]>
  • Date: Wed, 14 Aug 2002 12:58:38 +0200
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcJDe6aIAXQu4ihuRCGP1p5GbkA2xAABJF7A
  • Thread-topic: Re: [FW-1] SAM question

Igor seems to be correct. The only files containing SAM_NOTIFY in NG are CPMIBase501.dll and fw.sys and I don't want to change those files... :(

Lars

> -----Original Message-----
> From: Igor U.Miturin [mailto:[email protected]]
> Sent: Wednesday, August 14, 2002 10:50
> To: [email protected]
> Subject: Re: [FW-1] SAM question
>
>
> Hi!
>
> It`s correct for FW 4.x, but incorrect for FW NG :-(
>
> Igor
>
> ----- Original Message -----
> From: "Frank Knobbe" <[email protected]>
> To: <[email protected]>
> Sent: Tuesday, August 13, 2002 10:53 PM
> Subject: Re: [FW-1] SAM question]
>
>
> > On Tue, 2002-08-13 at 02:26, Lars Troen wrote:
> > > When an ip address is blocked by SAM the firewall now
> rejects trafic
> from this host. Is it possible to make the firewall drop this
> trafic silent
> instead?
> >
> >
> > Lars,
> >
> > yes there is. Check the file <fw1dir>/lib/code.def. In there you see
> > definitions for SAM_LOG, SAM_NOTIFY and right after you see
> a 'reject'
> > followed by stuff in a block. Just change the reject to drop, and
> > reinstall your policy (I don't remember if a restart of fw1 is
> > necessary). After that change, fw1 will silently drop the
> SAM-blocked
> > packets.
> >
> > Regards,
> > Frank
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.