Hey Thomas, I'd like to know if you created this static nat server as a web server as a product installed on and then used it for protection within web intelligence. If so, check your logs for entries with smart defense. It may very well be a web intelligence protection. If it's the case, try to see what protection is being enforced and check to see if it's authorized traffic or if it's perhaps malicous. cheers! -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Thomas Sent: Wednesday, February 01, 2006 6:56 AM To: [email protected] Subject: [FW-1] HTTP Download stop randomly with R60 HFA02
Hi All, OS: SPLAT R60 HFA02 Firewall: R60 HFA02 A web server inside the firewall with static nat to the Internet. There are some files in the web server let the users download. Before the the HFA02(it means R60, and R60 HFA01) the download is without any problem. After apply the HFA02, the download will stop at any point of the files. Using the fw monitor check found that the packets during the download sent from the web server did receive by the firewall in the receiving interface, but not sent out the interface to the outgoing interface. For example, web server--------eth0==f/w==eth1--------user the last capture show that ony "i eth0", no "eth0 I" , "o eth1" , "eth1 O". If download from other interface without nat, it become correctly. Client inside the firewall with the hide nat and download from the Internet, it is fine too. Does anyone get the problem? -- Best Regards, Thomas Su Dynasafe Technologies, Inc. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
