[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW-1] Modif in dcerpc.def... it is dangerous?
- To: [email protected]
- Subject: [FW-1] Modif in dcerpc.def... it is dangerous?
- From: Security <[email protected]>
- Date: Thu, 18 Sep 2003 11:48:25 +0200
- Organization: Completel
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fr-FR; rv:1.0.2) Gecko/20030208 Netscape/7.02
Hello,
I have problem with the rule 998, and I must have DCE/RPC dialogue
between a DMZ an a LAN.
My solution is to modify the dcerpc.def. I have suppress "dcerpc_enforce_bind"
an this function.
---begin---
deffunc dcerpc_code() {
handle_port_135
or
dcerpc_reject_alterc
or
exchange_code()
};
---end---
It is dangerous? Is dcerpc_enforce_bind very important?
Thank's
Eric JANTZEN
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
