fw sam -t <time in seconds> -i subsrv <src ip> <netmask> <dst ip> <netmask> <service> <protocol>
like

fw sam -t 3600 -i subsrv 192.168.1.1 255.255.255.255 172.16.1.0 255.255.255.0 22 tcp


Roger Herr

WhyNot? Consulting Services
24165 IH 10 West Suite 217-183
San Antonio, Texas 78257
210-860-3990
Some men see things as they are and say why?
I dream things that never were and say "Why Not?"
                                               -Robert F. Kennedy

Or the original

You see things; and you say "Why?" But I dream things that never were; and I say "Why not?"
George Bernard Shaw
(1856-1950)
----- Original Message ----- From: "Giacomo Fazio" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, May 03, 2007 7:23 AM
Subject: [FW-1] R55 Blocking connection


Hello,

i have fw1 R55.

How can i block for a specified time a source address that is doing a lot of, for example, ssh connection
to my network?

Thanks
Giacomo
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to