Firewall-1

Re: [FW-1] Customizing the IP Stack

Subject: Re: [FW-1] Customizing the IP Stack
From: pkc_mls <pkc_mls AT YAHOO DOT FR>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 8 Mar 2007 16:50:36 +0100
jkaftan a écrit :
I am trying to find out what my Connection timeout limit is and there are
any limits set on fragments.

Does anybody know how to get at these settings?  I tried the following per
Nokia's advice but this just gave me stats.  I need to find out what my idol
connection time is and possible be able to change it.

hi,
the connection limit can be found in the dashboard -> global properties -> stateful inspection.
for the fragments, you can find some settings in smartdefense.
#fw ctl pstat
Shows you information on number of TCP connections and fragments.

#netstat -s
Shows TCP & UDP Statistics

#fw tab -t frag_table -f
The 'frag_table' holds information of connections that being fragmented.


        

        
                
___________________________________________________________________________ Yahoo! Mail réinvente le mail ! Découvrez le nouveau Yahoo! Mail et son interface révolutionnaire.
http://fr.mail.yahoo.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>