NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] State Sync and UDP 8116



"Figaro, Nicolas" wrote:
>
> 1 : yes, or your synchronization won't work at all

Actually, no. You should not need to add any rules for 8116/udp for
any firewall modules communicating on a LAN. When a module has
sync enabled, it "just knows" that 8116/udp is something it needs to
accept.

If you see 8116/udp showing up in your logs, I believe that it means
that that module does not believe it should be doing syncronization.
Double-check that it is enabled.

> 2 : source : 0.0.0.0

Yep. The synchronization chatter uses that for a source. Ugly, huh?

> -----Original Message-----
> From: Raymond N [mailto:[email protected]]
> Sent: jeudi 18 septembre 2003 18:48
> To: [email protected]
> Subject: [FW-1] State Sync and UDP 8116
>
> I am running NG FP2 with a pair of Nokia 330.  I am see the firewall
> dropping traffic of UDP 8116.  I guess this has something to do with the
> state-sync feature.  Here are my questions:
>
> 1- Do I need to create a rule to allow this traffic in order for the
> state-sync to work?
>
> 2- The firewall log don't show the "source" of this traffic, why?

--
Crist J. Clark                               [email protected]
Globalstar Communications=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.