Dear friends,

we discover some (too much) reject events on our two gateways.

The environment:
2x E250 Solaris 7
+ Check Point VPN-1(TM) & FireWall-1(R) Version 4.1 Build 41510
+ StoneBeat 2.0 (Build 2035) patch 05-01

2x 34Mbit internet connection
2x Lotus Domino Server (http) (cpu load < 10%)
This all is a full switched network.

In the logviewer we found the following informations around the clock:
message SYNDefender warning: SYN -> SYN-ACK -> RST
message SYNDefender warning: SYN -> SYN-ACK -> Timeout

SYN defender settings:
Method:                 SYN Gateway
Timeout:                60 sec. (this is the max.)
Max. Sessions:      7000

But this are definite no attacks! We have testet some connections from
outside our
country and got the same errors. Our customers complain the bad status on
our webservers ;o(
They did not get any pictures, pages and style sheets.

What is your expirience with this feature?
I am grateful for any ideas!

Thanks and greetings Daniel

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to