Hi Daniel

Take a look at the FAQs at www.phoneboy.com
I remember, there's an article there about this.

Search for SYN asf. You can tweak a certain FW-1 file to get rid of these
messages. It changes the way, FW-1 treats certain packets, but you have to
decide for yourself if you want that.

Cheers
Ralf G.

----- Original Message -----
From: "Mr. Firewall" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, December 16, 2002 8:19 AM
Subject: [FW-1] SYNdefender experience


> Dear friends,
>
> we discover some (too much) reject events on our two gateways.
>
> The environment:
> 2x E250 Solaris 7
> + Check Point VPN-1(TM) & FireWall-1(R) Version 4.1 Build 41510
> + StoneBeat 2.0 (Build 2035) patch 05-01
>
> 2x 34Mbit internet connection
> 2x Lotus Domino Server (http) (cpu load < 10%)
> This all is a full switched network.
>
> In the logviewer we found the following informations around the clock:
> message SYNDefender warning: SYN -> SYN-ACK -> RST
> message SYNDefender warning: SYN -> SYN-ACK -> Timeout
>
> SYN defender settings:
> Method:                 SYN Gateway
> Timeout:                60 sec. (this is the max.)
> Max. Sessions:      7000
>
> But this are definite no attacks! We have testet some connections from
> outside our
> country and got the same errors. Our customers complain the bad status on
> our webservers ;o(
> They did not get any pictures, pages and style sheets.
>
> What is your expirience with this feature?
> I am grateful for any ideas!
>
> Thanks and greetings Daniel

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to