Hello, I already setup this option...and its not working yet... I can't find an option to set up, so whenever checkpoint received spoofing from an interface, send an email alert..
Under Topology in the interface I want to monitor, there are these options for Spoofing tracking "none", "log", "alert"... all but email alert.... If I choose log, just send it to tracker If I chose alert, just show it in tracker as an alert.. But I can't make checkpoint send me an email alert.. Any other idea? -----Mensaje original----- De: Mailing list for discussion of Firewall-1 [mailto:[email protected]] En nombre de Jose Valdivia Enviado el: Martes, 24 de Febrero de 2009 04:53 p.m. Para: [email protected] Asunto: Re: [FW-1] send email when spoofing alert is detected You have to configure your mail server settings: In Dashboard Global Properties > Alert Commands. Run mail alert script specifies the OS script to be executed when "Mail" is specified as the Track in a rule. internal_sendmail [-s subject] -t mailserver [-f sender_email] recipient_email [recipient_email ...] -s subject = The subject of the mail message is specified by subject. If the mail subject is more than one word, it must be written within quotation marks. -t mailserver = The system mail server. -f sender_email = The email address of the sender. recipient_email = The email address of the recipient. At least one recipient must be specified. Now you should be able to select Alert on the tracker I don't have any to log on and make sure about the option, but I configured just as I mention above. Jose Valdivia On Tue, Feb 24, 2009 at 8:51 AM, Oscar Esquivel <[email protected]> wrote: > > Hello guys, I trying to set up an alert in NG R65 Secure Platform, when > spoofing is detected in some critical interfaces, I want checkpoint to > send me an email about this alert...I see this options in spoofing > configuration, > Spoofing tracking "none", "log", "alert"... > If I choose log just send it to tracker... > If I choose alert, just send an alert to tracker. > > But what I want is that checkpoint send me an email about it. > > > > The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. > > > Scanned by Check Point Total Security Gateway. > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= -- Jose Valdivia Firewall Enginner Perot Systems CCSA CCSE WCSA NCMA NCMP Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
