Hi again,
we are proceeding as follows:
We searched the files table.def on our smartcenter:
Buenas Oscar,
el el Smartcenter hay unos ficheros llamados table.def en los cuales se
definen los valores por defecto:
[EMAIL PROTECTED] ~]# find / -name table.def
/opt/CPfw1-R55/lib/table.def
/opt/CPfw1-R55/libsw/table.def
/opt/CPfwbc-41/lib/table.def
/opt/CPfwbc-41/libsw/table.def
And we are editing /opt/CPfw1-R55/libsw/table.def
#ifdef CONNECTIONS_TABLE_HASH_SIZE
hashsize CONNECTIONS_TABLE_HASH_SIZE limit
CONNECTIONS_TABLE_LIMIT;
#else
hashsize 32768 limit 25000;
#endif
We removed the #ifdef condition and fixed the value as follows:
hashsize 131072 limit 100000;
What do you think? Next we compiled the security policies...
Do you think that this will be the right way or should we try anything
else...
Any suggestiones would be appreciated...
Thanks a lot and regards...
Eric Janz
Departamento de Sistemas
Grupo Barceló Viajes
C\ 16 de Julio, 75
07009 Polígono Son Castelló
Palma de Mallorca - Baleares
Tel.: +34 971 448030
Fax.: +34 971 436986
----- Remitido por Eric Janz/DS/BDC con fecha 24/09/2005 11:03 -----
Eric Janz/DS/BDC
24/09/2005 10:32
Para
Mailing list for discussion of Firewall-1
<[email protected]>
cc
Asunto
Howto increase connection table limit
Hi dear Gurus,
we have a CheckPoint FW-1 with an Express License. Is there a way to
unlimit the connection table limit?
Thanks in advance,
Eric Janz
Departamento de Sistemas
Grupo Barceló Viajes
C\ 16 de Julio, 75
07009 Polígono Son Castelló
Palma de Mallorca - Baleares
Tel.: +34 971 448030
Fax.: +34 971 436986
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
