Hi, What is the exact version of your Checkpoint Smartcenter and modules (is R60 HFA_06 for all) and on what kind of platforms?
The messages : - "Mar 28 09:36:28 staff1 kernel: FW-1: ld_set_wto_ttl_ex: 1p is NULL or bad_time(-1) is not zero" could be ignored and was fixed. - "staff1 kernel: fwdynlog_commit: failed translating alert param. i=121, alert = 1 - setting alert = "log"" is according to Nokia about Smartdefense and could be solved by upgrading it. - "modprobe: modprobe: Can't locate module n" is a frequent message but I don't know the meaning of this. After looking that message on the Internet it should be an bug from Unix system. Could you describe your network environnement? Best regards, Khievhen TEA 2008/3/28, Security Stig <[EMAIL PROTECTED]>: > > Hello, > > I have a problem where Hide NAT becomes erratic (R60HFA6) and then stops > for > the first /24 part of /22 block when policy pushed to multiple clusters > IP's in the range 192.27.37.x or 192.27.38 192.27.39.x work fine but they > are on the same NIC and the same subnet mask. > The problem resolves itself if I push to just the one firewall cluster > > The same rule number and nat rule is logged in Tracker, with nat and > without > nat, sometimes in the same second on same node. > > eth3 Link encap:Ethernet HWaddr 00:04:23:CC:50:B1 > inet addr:192.27.36.44 Bcast:192.27.39.255 Mask:255.255.252.0 > > Anyone seen this behavior before (load is low) > Eric > > > At time of event > Mar 28 09:36:28 staff1 kernel: FW-1: ld_set_wto_ttl_ex: 1p is NULL or > bad_time(-1) is not zero > Mar 28 09:36:25 staff1 modprobe: modprobe: Can't locate module eth4-1 > Mar 28 09:36:25 staff1 modprobe: modprobe: Can't locate module eth4-0 > Mar 28 09:36:25 staff1 modprobe: modprobe: Can't locate module eth5-75 > Mar 28 09:36:25 staff1 modprobe: modprobe: Can't locate module eth5-74 > Mar 28 09:36:24 staff1 modprobe: modprobe: Can't locate module n > Mar 28 09:36:23 staff1 kernel: fwdynlog_commit: failed translating alert > param. i=121, alert = 1 - setting alert = "log" > Mar 28 09:36:23 staff1 kernel: fwdynlog_commit: failed translating alert > param. i=120, alert = 1 - setting alert = "log" > Mar 28 09:36:23 staff1 kernel: VPN-1: ERROR: No license for encryption, > disabling encryption features > Mar 28 09:36:22 staff1 modprobe: modprobe: Can't locate module n > Mar 28 09:36:19 staff1 modprobe: modprobe: Can't locate module n > > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
