Hi Daniel Take a look at the FAQs at www.phoneboy.com I remember, there's an article there about this.
Search for SYN asf. You can tweak a certain FW-1 file to get rid of these messages. It changes the way, FW-1 treats certain packets, but you have to decide for yourself if you want that. Cheers Ralf G. ----- Original Message ----- From: "Mr. Firewall" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, December 16, 2002 8:19 AM Subject: [FW-1] SYNdefender experience > Dear friends, > > we discover some (too much) reject events on our two gateways. > > The environment: > 2x E250 Solaris 7 > + Check Point VPN-1(TM) & FireWall-1(R) Version 4.1 Build 41510 > + StoneBeat 2.0 (Build 2035) patch 05-01 > > 2x 34Mbit internet connection > 2x Lotus Domino Server (http) (cpu load < 10%) > This all is a full switched network. > > In the logviewer we found the following informations around the clock: > message SYNDefender warning: SYN -> SYN-ACK -> RST > message SYNDefender warning: SYN -> SYN-ACK -> Timeout > > SYN defender settings: > Method: SYN Gateway > Timeout: 60 sec. (this is the max.) > Max. Sessions: 7000 > > But this are definite no attacks! We have testet some connections from > outside our > country and got the same errors. Our customers complain the bad status on > our webservers ;o( > They did not get any pictures, pages and style sheets. > > What is your expirience with this feature? > I am grateful for any ideas! > > Thanks and greetings Daniel ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
