Hi Crist,
> Are you seeing the ICMP echo request or the echo reply being blocked?
> If the request is being blocked, what destination address of the
> packet is should be irrelevant. All that matters is where the computer
> that sent the echo request is. The interface that the request came
> in on should be in the logs.
I see that the echo-request is being blocked. The IP is an external-IP from
a RDSI connection and the strange is that the interface from the packet come
in, that FW1 tells me, is qe1 and should be qe0. what happens?
> But I wonder if your problem isn't something else. Your qe1 and qe2
> aren't bridged somehow are they?
qe1 and qe2 are in the same multiport network card. All the rest of ther
traffic are ok.
> They aren't connected to the same physical network or something like that?
I think not. All seems correct.
> It is normal for Solaris systems to assign the same MAC to all
> interfaces. However, the same IP address should not appear
> multiple times and broacast addresses should not appear.
The following is a piece of the output of my "arp -a" command :
qe1 xxx.xxx.xxx.17 255.255.255.255 SP <MAC n#1>
qe2 xxx.xxx.xxx.17 255.255.255.255 <MAC n#1>
qe1 xxx.xxx.xxx.33 255.255.255.255 <MAC n#2>
qe2 xxx.xxx.xxx.33 255.255.255.255 SP <MAC n#2>
qe1 xxx.xxx.xxx.25 255.255.255.255 <MAC n#3>
qe2 xxx.xxx.xxx.25 255.255.255.255 <MAC n#3>
Broadcast addresses don't appear however the same IP appears twice. It is
normal?
> Which interface were you sniffing? This looks like the echo
> requests are successfully passing out of the Solaris system.
You can see the last email I sent some minutes ago.
Regards,
Jose
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
