On 31/08/10 17:09, MikeCC wrote: > Hello, > > We saw an infected machine send out IP packets with a destination IP address > of just . the Checkpoint passed the packet I guess because the rule is to > allow any destination on HTTP, our internet rule. > > But I'm surprised the IPSO (the internet FW is an IP Platform) v 4.2 routed > the packet.
Well somehow the address was not represented correctly. It may have been 0.0.0.0 or something like that but the IP adres in a packet simply is a 32 bit field. So you must first determine the real address used and not this representation. Hugo. -- [email protected] http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
