Firewall-1

Re: [FW-1] allow dynamic url/domain

Subject: Re: [FW-1] allow dynamic url/domain
From: Reinhard Stich <r.stich AT INTERNET-SECURITY DOT AT>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 23 Feb 2006 09:33:26 +0100
hi,

I can't recommend working with domain-names because the fw is required to do dns-lookups for every IP then - and this makes it slow.

for http you can work with ressources - but this only works for http.

so if you need to setup filters based on names the better solution is to use a proxy or something like that. for example aladdin esafe is a fine solution for http, ftp :-)

cheers
reinhard

At 06:10 23.02.2006, you wrote:
Hi Gurus,

I have problem on allowing domain through checkpoint.
I want to allow user to www.yahoo.com and allow smart center server to
automcatically update smart defense.

Can someone help me to build the rules, because yahoo.com and smartdefense
IP address is dynamically change.

Thanks

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

--
Reinhard Stich  ASSIST  R.Stich AT internet-security DOT at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>