Or you can make "X11" part of the "Any" group: -Policy menu -Global Properties -SmartDashboard Customization -Stateful Inspection -Check "reject_x11_in_any"
-RoNNY On 3/3/06, Reinhard Stich <[EMAIL PROTECTED]> wrote: > hi, > > X11 ist not part of the "any"-service - so please make a rule where > you allow X11. > > cheers > reinhard > > At 17:32 03.03.2006, you wrote: > >I'm not sure if I've misunderstood something (not the first time), or what > >else. Here is my problem: > > > >Configuration: one central gateway, and one Nokia enforcement module. Both > >managed by the same smartcentre. Both on NG R55, running Traditional Mode > >VPN. There is a site-to-site VPN between the two. Office Mode configured > >on central gateway. > > > >Problem: Connecting to the internal systems behind the Nokia - no problem. > >But I can't display back X, or even ping the client. > > > >I can connect to the central gateway and display back/ping the client > >without any problems. > > > >I noticed that when I connect to a system behind the central gateway > >(telnet), I can see the IP address of the client is the office mode > >address. > > > >However, connecting to a system behind the Nokia, the IP address is not the > >office mode address but the one assigned by the ISP router. > > > >The firewall rules appear to be OK, but the problem is the point above (the > >office mode address isn't shown up). > > > >Any hints? > > > >Many thanks. > > > >Huiqi Liu > > > >================================================= > >To set vacation, Out-Of-Office, or away messages, > >send an email to [EMAIL PROTECTED] > >in the BODY of the email add: > >set fw-1-mailinglist nomail > >================================================= > >To unsubscribe from this mailing list, > >please see the instructions at > >http://www.checkpoint.com/services/mailing.html > >================================================= > >If you have any questions on how to change your > >subscription options, email > >[EMAIL PROTECTED] > >================================================= > > -- > Reinhard Stich ASSIST [EMAIL PROTECTED] > Internet Security AG, 1150 Wien, Johnstrasse 29 > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
