Reinhard Stich wrote:
> hi,
>
> I can't recommend working with domain-names because the fw is required
> to do dns-lookups for every IP then - and this makes it slow.
>
> for http you can work with ressources - but this only works for http.
Doesn't http_resoucers do dns-lookups? what's the diference? caches?
>
> so if you need to setup filters based on names the better solution is to
> use a proxy or something like that. for example aladdin esafe is a fine
> solution for http, ftp :-)
>
> cheers
> reinhard
>
> At 06:10 23.02.2006, you wrote:
>
>> Hi Gurus,
>>
>> I have problem on allowing domain through checkpoint.
>> I want to allow user to www.yahoo.com and allow smart center server to
>> automcatically update smart defense.
>>
>> Can someone help me to build the rules, because yahoo.com and
>> smartdefense
>> IP address is dynamically change.
>>
>> Thanks
>>
>> =================================================
>> To set vacation, Out-Of-Office, or away messages,
>> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
>> in the BODY of the email add:
>> set fw-1-mailinglist nomail
>> =================================================
>> To unsubscribe from this mailing list,
>> please see the instructions at
>> http://www.checkpoint.com/services/mailing.html
>> =================================================
>> If you have any questions on how to change your
>> subscription options, email
>> fw-1-owner AT ts.checkpoint DOT com
>> =================================================
>
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
