Oscar Esquivel schrieb: > Hello, I already setup this option...and its not working yet... > I can't find an option to set up, so whenever checkpoint received > spoofing from an interface, send an email alert.. > > Under Topology in the interface I want to monitor, there are these > options for Spoofing tracking "none", "log", "alert"... all but email > alert.... > If I choose log, just send it to tracker > If I chose alert, just show it in tracker as an alert.. > > But I can't make checkpoint send me an email alert.. > > Any other idea? >
Hi, if this is the only place where to use 'alert', you can change the definition in the Global Properties. Just go to "Policy" - "Global Properties" - "Log and Alert" - "Alert Commands" and move or copy the command "internal_sendmail" with its options to the first line named "Run popup alert script". Not tested it here, but it should work there after installing the rule base, too. Please be aware: Doing so you change the default "Alert" command. Hope it helps, best regards, Matthias -- AERAsec Network Services and Security GmbH HRB: 133265 München Wagenberger Strasse 1 UStID: DE-209125001 D-85662 Hohenbrunn, Germany Tel. +49 8102 895 190 Fax. +49 8102 895 199 Sitz der Ges.: D-85662 Hohenbrunn, Geschäftsführer: Dr. Matthias Leu http://www.aerasec.de http://www.fw-1.eu PGP Public Key: http://www.aerasec.de/wir/publickeys/MatthiasLeu.asc Scanned by Check Point Total Security Gateway. Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
