RE: [FW1] unknown established TCP packet

[Richard Parry <Richard.Parry@FW1-NOSPAMoptimation.co.nz>]

-----BEGIN PGP SIGNED MESSAGE-----

Steve;

We had the same problem, and regressed the firewall concerned back to
SP2.  Basically there was nothing we could get to work, on Linux or
Solaris.  I expect this is a major functionality problem with SP3.

However, we've had no problems with SP2.  Have you re-installed your
policy?  I'm fairly sure it does nothing special until you do that.

Richard
- --
Richard Parry                          richard.parry@optimation.co.nz
Glue Guy: CCNA, CSE(SMB), MCP, makes pretty good coffee    Optimation
Phone: +64 4 470 5814 x 848    Pager: richardp.pager@optimation.co.nz

> -----Original Message-----
> From: Partridge, Steve [mailto:spartridge@comengco.com]
> Sent: Tuesday, 30 January 2001 12:12 p.m.
> To: 'fw-1-mailinglist@lists.us.checkpoint.com'
> Subject: [FW1] unknown established TCP packet
> 
> 
> 
> Hi all,
> 
> I am trying to stop logging 'rule 0 unknown established TCP 
> packet' as per
> PhoneBoy's recommendations
> http://www.phoneboy.com/fw1/faq/0408.html
> <http://www.phoneboy.com/fw1/faq/0408.html>  .
> I can not get it to work.  I am not trying to revert to the 
> old behavior. I
> am only trying to stop logging this. I tried commenting out 
> the line in the
> file $FWDIR/lib/fwui_head.def .  I tried both of the 
> following combinations
> to comment the line (one with a space after the // and one 
> without a space).
> 
> // #define NON_SYN_RULEBASE_MATCH_LOG
> //#define NON_SYN_RULEBASE_MATCH_LOG
> 
> 
> I did a fwstop before modifying the file with notepad than
> restarted firewall with fwstart.
> 
> NT 4.0 sp4
> FW-1 v4.1 sp2 
> 
> Has anyone had any luck stopping this logging 'rule 0 unknown 
> established
> TCP packet' ?
> Any suggestions on what I may be doing wrong?
> 
> 
> Thanks
> Steve
> 
> 
> 
> 
> ==============================================================
> ==================
>      To unsubscribe from this mailing list, please see the 
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
> 

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0

iQEVAwUBOnYSVfVxtQ5VlW2tAQHbfgf/QuptPpsng/f1oPVR/oOI/vuw9958QRo3
pqaTKsaFTibXVaOIeBmSgd6AVsYMqSFW3DKLpEjrU8Jbz9UXERBadwZjG5kUGzUT
UsByfL9+fni8fZuwUAuu8OiPQAkrLdCjmG9gjX3FtmXUw+1jBYtn5r43saB6qm1X
QaurU0C7hu8WPB33g4CzMmBfKrmaUuEtHdueCMXOglr5obQeAlvOCfKjIKGImKeJ
OoJj3nJ1UBWw8ifhvNIbut5DcoefG5X1j5q4SNgGUDbPzWr+HNe32eQbCv6JVEyq
2lHVi0iUMvFlRmCX2kRckTL77LFezwi55amFtV5IPVDVfP0NasSUIg==
=J6YV
-----END PGP SIGNATURE-----


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================