[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] TCP out of state messages and a high load

Andre Vink wrote:
>
> Dear all,
>
> Since a few day the FW logs are filled with TCP packet out of state
> messages, also the load on the firewall is (Redhat 7.2 and FW-1 NG sp2)
> very high.
>
> I changed to state checking in the policy editor and also in de
> objects_5_0.c this all to no avail.
> Does anyone know what's going on and how to solve this?
>

 Set this  to '0' : note that 'dbedit' is needed to change
parameters in the objecst file since NG.



    fw_log_out_of_state_tcp


As in :

  dbedit > modify properties firewall_properties fw_log_out_of_state_tcp
0

(e.g.).


Do not forget :

 update  properties firewall_properties

  And stop/restart the fw. software or reboot.

  M.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================