Erik,
Broadcasts to UDP port 2301 are invariably from Compaq machines.
I think that these broadcast packets are some sort of information update
or discovery protocol. It's probably connected with Compaq's WBEM
(Web-Based Enterprise Management) which used TCP port 2301 - try
browsing to http://localhost:2301/ on a Compaq.
Before you can create your rule, you'll need to define a custom service:
Manage->Services->New...->UDP
Name: Compaq-WBEM-Broadcast
Port: 2301
and also the broadcast Workstation object
Manage->Network Objects->New...->Workstation
Name: Broadcast
IP: 255.255.255.255
Then you can create your rule.
Regards,
Roy Hills
NTA Monitor Ltd
At 15:10 02/06/00 -0400, Erik Skoog wrote:
>Greetings
>
>
> I am getting a drop message in my log file stating:
>
>
> Source Dest Service Action
> Firewall 255.255.255.255 2301 drop
>
>
> I was wondering what the consiquences of creating an explicit rule in my
>firewall
>
> Source Dest Service Action Track
> Firewall 255.255.255.255 2301 drop (None)
>
>would be (if anything)
>
>
>
>===========================================================================
>=====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>===========================================================================
>=====
--
Roy Hills Tel: +44 1634 721855
NTA Monitor Ltd FAX: +44 1634 721844
14 Ashford House, Beaufort Court,
Medway City Estate, Email: [EMAIL PROTECTED]
Rochester, Kent ME2 4FA, UK WWW: http://www.nta-monitor.com/
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
