Firewall-1

[FW-1] Issues with R55-HFA16

Subject: [FW-1] Issues with R55-HFA16
From: Nico De Ranter <nico AT SONYCOM DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 23 Jan 2006 09:46:07 +0100
Hi,

I'm not sure whether this is a hardware or software issue.  Shortly
after applying NG R55 HFA16 my firewall started behaving arraticly: a
few times a week time suddenly starts flipping on the firewall resulting
in lots of lost packages and the following messages in syslog:

Dec 31 01:00:00 fw fw: [ID 140332 kern.notice] FW-1: last packet seen
-1201222288 seconds ago, assuming clock change.
Jan 23 01:51:31 fw fw: [ID 140332 kern.notice] FW-1: last packet seen
1201222290 seconds ago, assuming clock change.
Dec 31 01:00:00 fw fw: [ID 140332 kern.notice] FW-1: last packet seen
-1201222344 seconds ago, assuming clock change.
...

The firewall is a Sun Netra T1 (Sparc) running Solaris 8. There is no
ntp daemon running that could mess-up time. I have since applied HFA17
but that doesn't change anything.  Anybody seen this before?

I wonder whether the Sun gets the time from it's hardware clock or
whether it checks it once at bootup and then keeps track of it in
software (like a PC?)?

Nico

-- 
---------------------------------------------------------
 "It has been said that there are only two businesses that
  refer to customers as users: illegal drug trade and
               the computer industry."
---------------------------------------------------------
Nico De Ranter
Senior System Administrator
Sony Service Center (NSCE)
The Corporate Village, Da Vincilaan 7-D1
B-1935 Zaventem, Belgium
Telephone: +32 (0)2 700 86 41 Fax: +32 (0)2 700 86 22

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>