[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1] Decreasing tcpendtimeout
Hello everyone, I have problems with windows NT 4.0 PCs trying to print documents using a remote printer (HP jetdirect + LaserJet 1200) across the firewall (Check Point VPN1 NG FP1) with Microsoft LPD/LPR printer protocol (port 515). We found that the print application will frequently close connections, and then in less than 50 seconds, it will try to open them again, causing "Syn for established connection" droped packets. We found that one solution is to decrease the default timer for half-closed connections (tcpendtimeout) to a much smaller value than 50 seconds (p.e. 10 seconds). We would like to know what are the risks or problems associated with this change. We have two Nokia IP330 appliances (IPSO 3.4.2) in cluster configuration (VRRP) with Check Point VPN-1/Firewall-1 NG Feature Pack 1. Thanks in advance for your help. Regards. Italo Dacosta ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|