[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW1] Logs messages, I'm confused ??
I found the answer to my problem. I had syn-defender enabled in FW properties. Turning this off resolved my problem. I later turned it back on after bumping up the connections from 5000 to 10000. My logs are clean now. John Gesualdi wrote: > I'm running FW1 4.0 SP5 on a Nokia. I have a Web server in my DMZ, I'm noticing > allot of rejects in my logs for this web server. They look like these and I'm > getting a whole bunch. The weird thing is that my site is up and I have not > gotten any complaints from users trying to access it. > > 21:59:59 drop frt >eth-s1p1c0 proto tcp src d181820ad.rochester.rr.com dst > www service http s_port 2439 len 48 rule 59 > > 21:59:59 drop frt >eth-s1p1c0 proto tcp src cache-dg09.proxy.aol.com dst > www service http s_port 50655 len 48 rule 59 > > The FW1 log viewer shows these coming from "daemon" and rule 0. Can someone try > to explain this. I'm concerned that I may be losing hits. Thanks very much. > > -- > John Gesualdi > The Providence Journal Company > Phone> Pager> CCDP,CCNP > > ================================================================================ > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================================================ -- John Gesualdi The Providence Journal Company phonepagerCCDP,CCNP ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|