"Figaro, Nicolas" wrote: > > 1 : yes, or your synchronization won't work at all
Actually, no. You should not need to add any rules for 8116/udp for any firewall modules communicating on a LAN. When a module has sync enabled, it "just knows" that 8116/udp is something it needs to accept. If you see 8116/udp showing up in your logs, I believe that it means that that module does not believe it should be doing syncronization. Double-check that it is enabled. > 2 : source : 0.0.0.0 Yep. The synchronization chatter uses that for a source. Ugly, huh? > -----Original Message----- > From: Raymond N [mailto:[EMAIL PROTECTED] > Sent: jeudi 18 septembre 2003 18:48 > To: [EMAIL PROTECTED] > Subject: [FW-1] State Sync and UDP 8116 > > I am running NG FP2 with a pair of Nokia 330. I am see the firewall > dropping traffic of UDP 8116. I guess this has something to do with the > state-sync feature. Here are my questions: > > 1- Do I need to create a rule to allow this traffic in order for the > state-sync to work? > > 2- The firewall log don't show the "source" of this traffic, why? -- Crist J. Clark [EMAIL PROTECTED] Globalstar Communications (408) 933-4387 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
