Firewall-1

Re: [FW-1] drops on rule 995 for port 135?

Subject: Re: [FW-1] drops on rule 995 for port 135?
From: Martín Alcalá Rubí <malcala AT SADVISOR DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 20 Apr 2005 16:40:50 -0300
Hi Chris,

   Generally, drops associted with very high rule numbers (far above
our last rule number) are associated with SmartDefense.

Saludos cordiales,

Martín Alcalá Rubí - Ingeniería de Clientes
Security Advisor
www.sadvisor.com



Covington, Chris wrote:

Hi all,

I've been killing myself researching an Active Directory replication
problem and it turns out that FW-1 is the culprit:

Number:         7770
Date:                   20Apr2005
Time:                   13:43:18
Product:        VPN-1 & FireWall-1
Interface:      eth1
Origin:                 fw1 (x.x.x.x)
Type:                   Alert
Action:                 Reject
Protocol:       tcp
Service:        135
Source:         zor (10.20.6.3)
Destination:    saturn.plusone.com (10.0.2.5)
Rule:                   995
Source Port:    2853

Does anyone know how to allow this traffic to pass?  What is rule 995
anyway?

thanks
---
Chris Covington
IT
Plus One Health Management
75 Maiden Lane Suite 801
NY, NY 10038
646-312-6269
http://www.plusoneactive.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================





=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>