On 1/7/07, cisco4ng <[EMAIL PROTECTED]> wrote:

Hi Everyone,

Solution
By default, value of keep_DF_flag is 0, meaning the DF flag is turned off.
If value of keep_DF_flag is set to 1, the Firewall keeps the DF bit
on the original packet.

I know how to use dbedit but I don't know exactly what the syntax is for
this.


1) backup your objects_5_0.C
2) replace "name_of_your_fw_object" in the following lines with your
firewall's object name

dbedit>  print network_objects name_of_your_fw_object
in the output you should see -> keep_DF_flag: false

dbedit> modify network_objects name_of_your_fw_object keep_DF_flag true
dbedit> update network_objects name_of_your_fw_object
dbedit> quit

And use guidbedit if possible.

Br.
Robby

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to