ok, thanks..but Where I setup this TIMEOUT?, on the FW OBJECT?, on the
GLOBAL PROPERTIES?


Saludos,

Mateo Cabrera - Soporte Tecnico
Security Advisor
www.sadvisor.com

-----Mensaje original-----
De: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] nombre de
fw-1.group
Enviado el: martes, 08 de junio de 2004 17:04
Para: [EMAIL PROTECTED]
Asunto: Re: [FW-1] FP3 Cluster XL - how to stop outgoing packets using
Cluster IP


hi jt,

the following work in R55:

  backup $FWDIR/lib/tables.def and modify the following line
  no_hide_services_ports = { <500, 17>, <259, 17>, <1701, 17> };
  to:
  no_hide_services_ports = { <500, 17>, <259, 17>, <1701, 17>, <0, 1> };

<0, 1> will cause icmp packages originated from the cluster nodes to be
send with their physical ip-address. this should work with FP3 and above

regards
ulli

> Is there any way to modify this behavior?  I need for outgoing packets
> originating on the gateways themselves to use the gateway's real IP,
> not the Cluster IP.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to