I see nothing in the SmartDefense logs and I think SD is only looking for DNS over UDP.
br christian 2005/6/20, dhananjoy <[EMAIL PROTECTED]>: > Does Smart defense check for DNS over TCP or only DNS over UDP?? > On 6/18/05, Ray <[EMAIL PROTECTED]> wrote: > > > If you click on the SmartDefense link in SmartView Tracker you can see if > > there were any drops. There is a DNS section in SmartDefense; you might > > want > > to disable it or set it to Monitor Only if the log shows any drops. > > > > RAy > > > > >From: Christian Franke <[EMAIL PROTECTED]> > > >Reply-To: Mailing list for discussion of Firewall-1 > > ><[email protected]> > > >To: [email protected] > > >Subject: Re: [FW-1] SPLAT R55 Domain TCP > > >Date: Sat, 18 Jun 2005 15:37:24 +0200 > > > > > >where are the settings for dns tcp, I did not find anything > > > > > >2005/6/18, Ray <[EMAIL PROTECTED]>: > > > > Check the SmartDefense section as well. > > > > > > > > Ray > > > > > > > > >From: Christian Franke <[EMAIL PROTECTED]> > > > > >Reply-To: Mailing list for discussion of Firewall-1 > > > > ><[email protected]> > > > > >To: [email protected] > > > > >Subject: Re: [FW-1] SPLAT R55 Domain TCP > > > > >Date: Sat, 18 Jun 2005 08:58:23 +0200 > > > > > > > > > >Hello Reinhard, > > > > > > > > > >thats my problem, I see only the drop and implied rule. Nothing more > > > > >in the info field that helps me. > > > > > > > > > >br > > > > >christian > > > > > > > > > >2005/6/18, Reinhard Stich <[EMAIL PROTECTED]>: > > > > > > hi, > > > > > > > > > > > > what do you see in the "info" field of the logs? > > > > > > > > > > > > there you should see a reason why the firewall is dropping the > > > > >DNS-packets. > > > > > > > > > > > > cheers > > > > > > reinhard > > > > > > > > > > > > At 08:28 18.06.2005, you wrote: > > > > > > >Hello, > > > > > > > > > > > > > >a run into a problem which I dosnt understood. A few days ago our > > > > > > >brandnew HA-Splat installation is - without any changings - > > >dropping > > > > > > >tcp domain dns. I amke allt he necessary settings and activate > > >domain > > > > > > >dns in the implied rules. Now rule 0 ist dropping the dns tcp > > >request. > > > > > > >So, I change the source port of domain_tcp to 1024-xxxx and now > > its > > > > > > >working. > > > > > > > > > > > > > >Any suggestion? > > > > > > >-- > > > > > > >Christian Franke <[EMAIL PROTECTED]> > > > > > > >-------------------------------------------------------- > > > > > > > powered by Sun Java Linux Desktop > > > > > > >-------------------------------------------------------- > > > > > > > > > > > > > >================================================= > > > > > > >To set vacation, Out-Of-Office, or away messages, > > > > > > >send an email to [EMAIL PROTECTED] > > > > > > >in the BODY of the email add: > > > > > > >set fw-1-mailinglist nomail > > > > > > >================================================= > > > > > > >To unsubscribe from this mailing list, > > > > > > >please see the instructions at > > > > > > >http://www.checkpoint.com/services/mailing.html > > > > > > >================================================= > > > > > > >If you have any questions on how to change your > > > > > > >subscription options, email > > > > > > >[EMAIL PROTECTED] > > > > > > >================================================= > > > > > > > > > > > > -- > > > > > > Reinhard Stich ASSIST [EMAIL PROTECTED] > > > > > > Internet Security AG, 1150 Wien, Johnstrasse 29 > > > > > > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > > > > > > > > > > > ================================================= > > > > > > To set vacation, Out-Of-Office, or away messages, > > > > > > send an email to [EMAIL PROTECTED] > > > > > > in the BODY of the email add: > > > > > > set fw-1-mailinglist nomail > > > > > > ================================================= > > > > > > To unsubscribe from this mailing list, > > > > > > please see the instructions at > > > > > > http://www.checkpoint.com/services/mailing.html > > > > > > ================================================= > > > > > > If you have any questions on how to change your > > > > > > subscription options, email > > > > > > [EMAIL PROTECTED] > > > > > > ================================================= > > > > > > > > > > > > > > > > > > > > >-- > > > > >Christian Franke <[EMAIL PROTECTED]> > > > > >-------------------------------------------------------- > > > > > powered by Sun Java Linux Desktop > > > > >-------------------------------------------------------- > > > > > > > > > >================================================= > > > > >To set vacation, Out-Of-Office, or away messages, > > > > >send an email to [EMAIL PROTECTED] > > > > >in the BODY of the email add: > > > > >set fw-1-mailinglist nomail > > > > >================================================= > > > > >To unsubscribe from this mailing list, > > > > >please see the instructions at > > > > >http://www.checkpoint.com/services/mailing.html > > > > >================================================= > > > > >If you have any questions on how to change your > > > > >subscription options, email > > > > >[EMAIL PROTECTED] > > > > >================================================= > > > > > > > > ================================================= > > > > To set vacation, Out-Of-Office, or away messages, > > > > send an email to [EMAIL PROTECTED] > > > > in the BODY of the email add: > > > > set fw-1-mailinglist nomail > > > > ================================================= > > > > To unsubscribe from this mailing list, > > > > please see the instructions at > > > > http://www.checkpoint.com/services/mailing.html > > > > ================================================= > > > > If you have any questions on how to change your > > > > subscription options, email > > > > [EMAIL PROTECTED] > > > > ================================================= > > > > > > > > > > > > >-- > > >Christian Franke <[EMAIL PROTECTED]> > > >-------------------------------------------------------- > > > powered by Sun Java Linux Desktop > > >-------------------------------------------------------- > > > > > >================================================= > > >To set vacation, Out-Of-Office, or away messages, > > >send an email to [EMAIL PROTECTED] > > >in the BODY of the email add: > > >set fw-1-mailinglist nomail > > >================================================= > > >To unsubscribe from this mailing list, > > >please see the instructions at > > >http://www.checkpoint.com/services/mailing.html > > >================================================= > > >If you have any questions on how to change your > > >subscription options, email > > >[EMAIL PROTECTED] > > >================================================= > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > -- > Regards, > dhananjoy > India. > GSM # : 091-9899602123 > --------------------------------------------------------------- > Registered Linux user # 375503 > http://counter.li.org > --------------------------------------------------------------- > Some men see things as they are and say why? > I dream things that never were and say "Why Not?" > -Robert F. Kennedy > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Christian Franke <[EMAIL PROTECTED]> -------------------------------------------------------- powered by Sun Java Linux Desktop -------------------------------------------------------- ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
