[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] SecuRemote and Split/Encrypted DNS
Title: RE: [FW1] SecuRemote and Split/Encrypted DNS
I had the same exact problem. Make sure you double check all your spacing and syntax in your "dnsinfo.C" (that's a cap. "C"). FW1 has a funny way of parsing this file. It is very picky. If the syntax is not correct, then the contents of your "dnsinfo.C" file will not get transferred to you SecuRemote user's workstation (it actually gets integrated into the user's "userc.C" file). If you do not see the dns information in the user's "userc.C" file then there is a very good chance that you have some sort of spacing or syntax error. Trust me.
Keyvan Moussavi
PEC Solutions, Inc.
Systems Integration Division
-----Original Message-----
From: David E. Hoobler Jr. [mailto:[email protected]]
Sent: Wednesday, January 31, 2001 2:09 PM
To: FW-1 Mailing List (E-Mail)
Subject: [FW1] SecuRemote and Split/Encrypted DNS
I have Firewall-1 version 4.1 SP1. I have added #define ENCDNS to the
crypt.def file. I have created the dnsinfo.C file. I have made the
:dns_xlate and :dns_encrypt entries in the userc.C file on the client. I
have bounced the firewall, re-installed the security policy and downloaded
the key to the client.
When using SecuRemote version 4.1 SP 3 build 4174, dnsinfo does not get
downloaded to the userc.C file. I have checked the dnsinfo.C file, found
the typo's, corrected them, bounced the firewall, installed the security
policy again and updated the site on the client. It still does not work. I
have three questions. 1) Are there any diagnostic tools or log files built
into FW-1 to figure out where the failure exists? 2) Are there any known
issues with SecuRemote build 4174? 3) Could Checkpoint have made this any
more difficult?
Thanks in advance
David Hoobler
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
