Firewall-1

Re: [FW-1] AI R55 - SPLAT - Squid Proxy - Port Scanning

Subject: Re: [FW-1] AI R55 - SPLAT - Squid Proxy - Port Scanning
From: KEREM ERKAN <kerem.erkan AT BASARI.COM DOT TR>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 28 Nov 2005 17:31:45 +0200
> 
> yes we do have port scanning enabled but i am wondering why the firewall
> here thinks its being port scanned in the first place
> 
I don't know what the cause may be, but I had some problems like this, when
I enabled Port Scan detection. If you are hiding your internal network
behind your firewall IP, this may be the problem. Probably the firewall gets
confused when the proxy gives answer for an old connection and thinks it is
being port scanned.

Kerem

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>