NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Normal to get TPC packet out of state?



Resolution 9351 shows you how to "allow" out of state packets!  This is
something I would not recommend anyone doing.  You may want to assess your
firewall infrastructure to determine if Nokia's "work around" is introducing a
potential risk to your organization.

- Tom



-----Original Message-----
From: Jarmoc, Jeff R. [mailto:[email protected]]
Sent: Friday, January 17, 2003 6:37 PM
To: [email protected]
Subject: Re: [FW-1] Normal to get TPC packet out of state?


Take a look at Nokia knowledgebase resolution 9351.  I've had to apply this on
several of our NG firewalls.

Hope this helps!

Jeff Jarmoc - CCSA, CCNA, MCSE
Network Analyst - Grubb & Ellis
[email protected]


-----Original Message-----
From: Thomas J. Carrigan III [mailto:[email protected]]
Sent: Friday, January 17, 2003 4:50 PM
To: [email protected]
Subject: Re: [FW-1] Normal to get TPC packet out of state?


Hello,

I am having the same problems with out of state packets when our Nokia boxes are
in a vrrp pair.  Engineers from Check Point and Nokia have been on site dealing
with these issues with no luck.  I will keep you posted on our findings.

- Tom

-----Original Message-----
From: NG, Alfred [mailto:[email protected]]
Sent: Friday, January 17, 2003 2:44 PM
To: [email protected]
Subject: [FW-1] Normal to get TPC packet out of state?


Hi Everyone,

I am running the Nokia IP440 firewalls in a redundant cluster on Checkpoint NG
FP3.

Just wondering if this is normal.
I get a lot of these dropped packets in the firewall.

Below is the pasted output from Checkpoint tracker:

th_flags: 11
message_info: TCP packet out of state


The source of the these packets are always different.

Anyone have any ideas?

> Alfred Ng
> Information Management Technology
> Alberta Pensions Administration
> 3rd Flr, Park Plaza, 10611 - 98 Ave
> Tel:Fax:> E-Mail: [email protected]
> Web site: www.apaco.ab.ca
>
NOTE: THIS MESSAGE IS INTENDED ONLY FOR THE ADDRESSEE, IT MAY CONTAIN PRIVILEGED
OR CONFIDENTIAL INFORMATION. If you are not the intended recipient of this
message, you should not: read it, distribute it, copy it or take any action in
reliance on the content of this communication.  If you have received this
communication in error, please notify us at once by reply E-mail, then
permanently delete the original, your reply and destroy any copy or printout.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail =================================================
To unsubscribe from this mailing list,
please see the instructions at http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected] =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail =================================================
To unsubscribe from this mailing list,
please see the instructions at http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected] =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail =================================================
To unsubscribe from this mailing list,
please see the instructions at http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected] =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.