Re: CP FW-1 next generation: TCP Packet out of state

Article View: comp.security.firewalls

Article #435

Back to comp.security.firewalls Previous Next

#435

From: mayer hans
Date: Sun, 07 Oct 2001 15:36

24 lines
1859 bytes

hi neil 

thanks for reply
TCP timeout is default ( and as before at old release ) with 3600 sec
but the problem occurs within 1 hour.

currently i have no access to cp ng only version 4.1
is this the same parameter in fwui_head.def as in 4.1 ? 
#define ALLOW_NON_SYN_RULEBASE_MATCH 

In article <tbYpWUrTBHA.254@dogwood.us.checkpoint.com>,
Neil Desai <ndesai01@tampabay.rr.com> wrote:
>
>You might want to increase the TCP timeout or change the parameters to allow
>non SYN packets to create and entry in the state table.
>Neil

-- 
best regards from vienna           |   
hans                               |   mayer (at) relay.bfl.at_SPAM

Technical Details

Message-ID: <1002469009.336264@bfl-ea1>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news.tele.dk!small.news.tele.dk!134.222.94.5!npeer.kpnqwest.net!nreader1.kpnqwest.net.POSTED!not-for-mail

References: <1002308196.894052@bfl-ea1> <tbYpWUrTBHA.254@dogwood.us.checkpoint.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,8f938ab63db9f2d7
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,8f938ab63db9f2d7
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2001-10-07 08:36:59 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news.tele.dk!small.news.tele.dk!134.222.94.5!npeer.kpnqwest.net!nreader1.kpnqwest.net.POSTED!not-for-mail
Newsgroups: comp.security.firewalls,cp.products.firewall-1
Subject: Re: CP FW-1 next generation: TCP Packet out of state
References: <1002308196.894052@bfl-ea1> <tbYpWUrTBHA.254@dogwood.us.checkpoint.com>
Organization: bfl
X-Newsreader: trn 4.0-test74 (May 26, 2000)
From: mayer@relay.bfl.at ( mayer hans )
Originator: mayer@relay.bfl.at ( mayer hans )
Message-ID: <1002469009.336264@bfl-ea1>
Cache-Post-Path: bfl-ea1!unknown@bfl-sg6-le0
X-Cache: nntpcache 2.3.3 (see http://www.nntpcache.org/)
Lines: 25
Date: Sun, 07 Oct 2001 15:36:49 GMT
NNTP-Posting-Host: 194.37.60.57
X-Complaints-To: abuse@kpnqwest.at
X-Trace: nreader1.kpnqwest.net 1002469009 194.37.60.57 (Sun, 07 Oct 2001 17:36:49 MET DST)
NNTP-Posting-Date: Sun, 07 Oct 2001 17:36:49 MET DST

Reply to Parent Message