Hi Matthew This rule results from the fact that Checkpoint SmartDefense is blocking infected Jpeg's, also know as JpegOfDeath. In short it comes from SmartDefens>Content Inspection>MalformedJPEG Don't remove it cause next big virus is just in front of the door. Check out: http://easynews.com/virus.html or http://isc.sans.org/ for more info.
cheers Philipp >>> [EMAIL PROTECTED] 01.10.2004 17:28:26 >>> Hello, After upgrading Smartdefense to the latest version that protects against the GDI+ exploit, I'm seeing many blocked outbound connections in SmartView Tracker that is blocking http traffic to various websites. Under the Information column in these entries there is nothing and under the Product column it indicates SmartDefense. The Rule number doing the blocking is 9980, however this rule is not in the rule base anywhere. Can anybody explain to me where I can find information on this rule and why these connectios are being dropped? Checkpoint NG R55 Enforcement module is on Sun E250 running Solaris 8. Thanks. Kind regards, Matt ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
