Hi Trung, CP Firewall-1 NG blocks X11 by default. You can either insert a rule above your rule explicitly allowing X11 or you can set the "reject_x11_in_any" global property to false using dbedit. I believe first way is recommended.
HTH, Andre CCSE-NG > Dear CheckPoint gurus, > > In our FW policy we have 1 rule saying: > > Source IP Destination IP Service Action > > x.x.x.x y.y.y.y any Accept > > However when we tried to connect from x.x.x.x to > y.y.y.y using X11 tcp protocol it failed. I checked > the log file and it stated that X11 is not allowed > through service "* any". It also recommended to create > earlier rule that explicitly allows X11. > > I just wonder which services are NOT allow through > service "*. any" and the reason why please drop me a > line > > Thanks. > > Regards, > > Trung Nguyen > > Email: [EMAIL PROTECTED] > > __________________________________________________ > Do you Yahoo!? > Yahoo! Shopping - Send Flowers for Valentine's Day > http://shopping.yahoo.com > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- +++ GMX - Mail, Messaging & more http://www.gmx.net +++ Bitte l�cheln! Fotogalerie online mit GMX ohne eigene Homepage! ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
