NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Unexpected SYN response!




In Linux you have to add the line to the following file

$FWDIR/boot/modules/fwkern.conf and reboot the machine.

In the Release Notes for this hotfix you could find additional information regarding additional bugs.



====================================
Mauricio F. Muñoz Quevedo
==============================================



Anthony <[email protected]>
Sent by: Mailing list for discussion of Firewall-1 <[email protected]>

17/12/2002 09:09 p.m.
Please respond to Mailing list for discussion of Firewall-1

       
        To:        [email protected]
        cc:        
        Subject:        Re: [FW-1] Unexpected SYN response!



        Thanks!
        My Checkpoint is installed in Redhat 7.2 Linux.
 
        Where is the kernel variable??
-----Original Message-----
From:
Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of Mauricio Munoz
Sent:
Wednesday, December 18, 2002 12:07 AM
To:
[email protected]
Subject:
Re: [FW-1] Unexpected SYN response!


The value is a kernel variable, so depends on the operating system you have to add the line, because, indeed, the variable is not created when you apply the Hotfix.

====================================
Mauricio F. Muñoz Quevedo
==============================================



Anthony <[email protected]>
Sent by: Mailing list for discussion of Firewall-1 <[email protected]>

17/12/2002 01:17 a.m.
Please respond to Mailing list for discussion of Firewall-1

       
       To:        [email protected]

       cc:        

       Subject:        [FW-1] Unexpected SYN response!




Hi

Checkpoint released a Hotfix for FP3 to resolve "Unexpected SYN Response".

The Release Notes said,
-------------------------------------------------
This behavior can be configured using the fw_allow_out_of_state_syn_resp
kernel
variable.
The possible values for this variable are:
0 - disallow unexpected SYN responses
1 - allow unexpected SYN responses
2 - allow unexpected SYN responses according to TCP sequence verifier
(default).
--------------------------------------------------

I applied the fix but could not found any value of
"fw_allow_out_of_state_syn_resp" in Objects_5_0.C.

Anyone know where it is??

Thanks

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================






 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.