Your network may be at risk ;-). You may define antispoofing on the topology tab of your gw object. Virtual interfaces should carry the physical interface anti-spoofing properties which means that your secondary interface must have the primary interface's anti-spoofing network as well as its own network (or whatever defined)..
fyi, -yinal ozkan --- John Gesualdi <[EMAIL PROTECTED]> wrote: > I'm having a problem with a secondary address > on my Nokia box. Since I > upgraded to NG FP2, > orignally I had 4.1Sp5. I'm receiving these > messages on startup from the > module. I think it's because > I have a secondary address on one interface on the > module. This setup worked > well for me > with version 4.1. How can I clear this up? > Thanks. > > > Nov 13 09:41:07 ba [LOG_CRIT] kernel: FW-1: 5 > interfaces installed > Nov 13 09:41:07 ba[LOG_CRIT] kernel: FW-1: > fw_attach: cannot find name of > interface 5 > Nov 13 09:41:07 ba [LOG_CRIT] kernel: FW-1: Warning: > The 5 interface is not > protected by the anti-spoofing feature. > Nov 13 09:41:07 ba [LOG_CRIT] kernel: Your > network may be at risk. In the > future, it is recommended that you > Nov 13 09:41:07 ba[LOG_CRIT] kernel: define > anti-spoofing protection > before installing the Security Policy. > Nov 13 09:41:08 ba [LOG_CRIT] kernel: VPN-1: > connected to FW-1 > Nov 13 09:41:16 ba [LOG_CRIT] kernel: FW-1: > fw_filterid: illegal ifn: -1 > > > > > -- > > > John A. Gesualdi, CCNP, CCDP, MCSE 2000 > [EMAIL PROTECTED] > The Providence Journal Company > Phone (401)277-8133 > Pager (401)785-6938 > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
