[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Striping exe files as they enter the firewall
If your management console and firewall are on different devices, the objects.C file that you should edit is on the management console. If you edit the one on the Firewall it will cause problems. After you edit the objects.C file, push your current policy. This will also push the objects.C file to the Firewall. TT Think Security! Because the global village has more than its fair share of idiots! -----Original Message----- From: Wade Sellers [mailto:[email protected]] Sent: Monday, January 28, 2002 1:57 PM To: [email protected] Subject: Re: [FW-1] Striping exe files as they enter the firewall That's exactly what I did and I also was locked out of my GUI and as I said before then I managed to strip every attachment that tried to come through the firewall. Wade Sellers |--------+----------------------------------------------> | | Aeon Hale <[email protected]> | | | Sent by: Mailing list for discussion| | | of Firewall-1 | | | <[email protected]| | | point.com> | | | | | | | | | 01/28/2002 09:41 AM | | | Please respond to Mailing list for | | | discussion of Firewall-1 | | | | |--------+----------------------------------------------> >--------------------------------------------------------------------------- ------------------| | | | To: [email protected] | | cc: | | Subject: Re: [FW-1] Striping exe files as they enter the firewall | >--------------------------------------------------------------------------- ------------------| I would also like to know exact steps. I tried setting this up and after I changed the objects.C file (i went by a solution that I found from Securepoint), I was locked out of the gui, so if somebody could please step by step this procedure, i would greatly appreciate it. These are the steps that I took that were unsucessful: 1. Create resource to filter attachments 2. Create rule for hte research 3. then, This is what I was told to do: Once you've set up the policy, go to the firewall. Find the objects.C file. Edit the file and look for the definition of the SMTP resource you've just created. Add the following to the end of the definition: : (forbiddenfiles : ("{*.(whatever)}") ) This part hosed me. Not sure if I did this correctly but checkpoint did not like the syntax. Thanks, Aeon -----Original Message----- From: Wade Sellers [mailto:[email protected]] Sent: Monday, January 28, 2002 11:59 AM To: [email protected] Subject: [FW-1] Striping exe files as they enter the firewall I know this was discussed before and I tried to set it up but I ended up striping ever attachment that came through the firewall instead of selected attachments. I would really like to disallow exe files from being sent through the firewall. can someone in detail explain how to do this. Thanks, Wade Sellers ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|