Firewall-1

Re: [FW-1] OSPF problem with IPSO 3.8

Subject: Re: [FW-1] OSPF problem with IPSO 3.8
From: ravi pina <ravi AT COW DOT ORG>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 23 Mar 2005 15:09:20 -0500
have you tried putinig an explicit rule at the top
that allows anyone to go to the ospf mcast nets* and
the fw modules for service ospf (proto 89)?

-r

* OSPFIGP.all.routers   224.0.0.5
  OSPFIGP.dr            224.0.0.6
  MCAST.all.routers     224.0.0.2



On Wed, Mar 23, 2005 at 03:37:04PM -0400, edlobo AT cantv DOT net said at one 
point in time:
> HI,
>
>  I have a doupt and i would like someone to tell me if there is any bug or
> misfunctioning for a Ipso Cluster running Ipso 3.8.1 build 28/ FP3 and OSPF
> routing. The problem is i have running OSPF in the cluster toward other
> ipso box, but the state i've seen in FW interface is EXSTART, so by looking
> at the FW logs i have seen an error "Bad unicast destination detected" over
> incoming packets from the external ipso box. Does any one knows why my FW
> does not receive DB desrciption packets and it remains in state EXSTART,
> so the FULL state in OPSF may not be reached.
>
>
> Thanks for any idea or comments
>
> Rgds
>
> Elobo
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================

--

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>