[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] FP3 - SmartDefense not reacting to portscans



They do show up in the normal log as "product: SmartDefense". The
special "SmartDefense" view in the FP3 Tracker is just a filter.

As i said before, i only have those "bad packet attack" entries in the
log. PortScans do not show up at all.





On Tue, 2002-11-26 at 02:26, Xena Warrior wrote:
> smartdefense logs are accessed through the
> smartdefense tool...i don't think they show up in the
> default log view. (could be wrong there)
> r u looking at the smartdefense logs?
>
>
> --- Steven Rodenburg <[email protected]>
> wrote:
> > Hi,
> >
> > FP3 SmartDefense is not responding to portscans at
> > all. I tried the
> > defaultsettings with "action = log" and i fiddled
> > around with the
> > parameters but to no avail.
> >
> > I can scan my self silly but SmartDefense is as
> > blind as a mole.
> >
> > SmartDefense is active as a few logentries about
> > "Bad packet attacks"
> > with "TCP flags do not make sense" in the info-field
> > came in over the
> > pas few days.
> >
> >
> > How can i make my visually challenged SmartDefense,
> > see again
> >
> >
> > Greetings,
> > Steven Rodenburg
> >
> > =================================================
> > To set vacation, Out Of Office, or away messages,
> > send an email to [email protected]
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > [email protected]
> > =================================================
>
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus � Powerful. Affordable. Sign up now.
> http://mailplus.yahoo.com
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
--
Steven Rodenburg <[email protected]>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================