You could just define a simple TCP service object with the ports as a range
(49500-50500). Ranges work as well as single ports.

Ray Lodato
617-578-3197
[EMAIL PROTECTED]


|---------+-------------------------------------------->
|         |           "Russell Aspinwall"              |
|         |           <[EMAIL PROTECTED]|
|         |           K>                               |
|         |           Sent by: "Mailing list for       |
|         |           discussion of Firewall-1"        |
|         |           <[EMAIL PROTECTED]|
|         |           KPOINT.COM>                      |
|         |                                            |
|         |                                            |
|         |           01/23/2004 10:22 AM              |
|         |           Please respond to "Mailing list  |
|         |           for discussion of Firewall-1"    |
|         |                                            |
|---------+-------------------------------------------->
>----------------------------------------------------------------------------------------------|
  |
|
  |       To:       [EMAIL PROTECTED]
|
  |       cc:
|
  |       Subject:  [FW-1] User defined TCP service
|
>----------------------------------------------------------------------------------------------|





Hi,

After upgrading to NG AI R54 recently, I had avoided downloading a new
policy on a v4.1 SP6 remote
enforcement module. This week I did install and have now found that a
policy with a User Defined TCP
Service will not install on the v4.1 module, the following error appears
"unable to downgrade object database for backward compatibility"

The User Defined service is defined as (the UDP service which operates on
the same ports is fine).

tcp, dport > 49499, dport < 50501

Can anyone suggest a way of enabling this service (which operates across a
VPN).

TIA

--
Regards

Russell

Email: russell dot aspinwall at flomerics dot co dot uk
Network and Systems Administrator           Flomerics Ltd
Telephone: 020-8941-8810 x3116              81 Bridge Road
Facsimile: 020-8941-8730                    Hampton Court
                                             Surrey, KT8 9HH
                                             United Kingdom

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================







The information contained in this message may be CONFIDENTIAL and is for the
intended addressee only.  Any unauthorized use, dissemination of the
information, or copying of this message is prohibited.  If you are not the
intended addressee, please notify the sender immediately and delete this
message.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to