-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jean-Sebastien Grenon wrote: | I have a weird problem with accessing internet sites: | FW-1 displays the error page "Unknown WWW server", but after a few refersh attemts I'm able to access a site. | | In FW-1 logs following rejects appear: | | Number: 254161 | Date: 22janvier2008 | Time: 15:10:37 | Product: VPN-1 & FireWall-1 | Interface: daemon | Origin: lan (x.x.x.x) | Type: Log | Action: Reject | Protocol: tcp | Source: Proxy (xx.xx.xx.xx) | Rule: 0 - Implied Rules | Source Port: 3326 | Information: reason: Unknown WWW server | | I have checked DNS resolving from FW-1 and it works fine, except the query time which varies from about 18 msec to 633 msec. But a bit more than half of a second is not a problem I suppose.
That is way to long. FW-1 does a load of request even where you do not expect it. I suggest you install a faster DNS server to improve on these poor figures. On the other hand you can forget about all those add-on functions and just let HTTP pas as just another TCP session. Hugo. - -- [EMAIL PROTECTED] http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHlkv0BvzDRVjxmYERAjymAJ9ZSBlL80TwqPkTn+AAQd83F+0PFACgiP/e nKEUoNpHSJVws9qoAvI6cJY= =zNGi -----END PGP SIGNATURE----- ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
