oki, I find it > the service domain_tcp was defined under Advanced with service type > domain_tcp. After changing this to none no more tcp drops.
2005/6/21, Christian Franke <[EMAIL PROTECTED]>: > thanks, but this dosnt help. Also adding a port range to domain-tcp > from 1024-xxxxx does not work longer. > > br > christian > > 2005/6/21, dhananjoy <[EMAIL PROTECTED]>: > > Hi > > There is an option "http_dont_dns_when_star_port" in > > Global Properties >> Smart Dashboard Customisation >> Advance Configuration > > >> Firewall-1 >> WebSecurity >> DNS >> > > May be this can help u .. > > > > > > On 6/20/05, Christian Franke <[EMAIL PROTECTED]> wrote: > > > > > > I see nothing in the SmartDefense logs and I think SD is only looking > > > for DNS over UDP. > > > > > > br > > > christian > > > > > > 2005/6/20, dhananjoy <[EMAIL PROTECTED]>: > > > > Does Smart defense check for DNS over TCP or only DNS over UDP?? > > > > On 6/18/05, Ray <[EMAIL PROTECTED]> wrote: > > > > > > > > > If you click on the SmartDefense link in SmartView Tracker you can see > > > if > > > > > there were any drops. There is a DNS section in SmartDefense; you > > > might > > > > > want > > > > > to disable it or set it to Monitor Only if the log shows any drops. > > > > > > > > > > RAy > > > > > > > > > > >From: Christian Franke <[EMAIL PROTECTED]> > > > > > >Reply-To: Mailing list for discussion of Firewall-1 > > > > > ><[email protected]> > > > > > >To: [email protected] > > > > > >Subject: Re: [FW-1] SPLAT R55 Domain TCP > > > > > >Date: Sat, 18 Jun 2005 15:37:24 +0200 > > > > > > > > > > > >where are the settings for dns tcp, I did not find anything > > > > > > > > > > > >2005/6/18, Ray <[EMAIL PROTECTED]>: > > > > > > > Check the SmartDefense section as well. > > > > > > > > > > > > > > Ray > > > > > > > > > > > > > > >From: Christian Franke <[EMAIL PROTECTED]> > > > > > > > >Reply-To: Mailing list for discussion of Firewall-1 > > > > > > > ><[email protected]> > > > > > > > >To: [email protected] > > > > > > > >Subject: Re: [FW-1] SPLAT R55 Domain TCP > > > > > > > >Date: Sat, 18 Jun 2005 08:58:23 +0200 > > > > > > > > > > > > > > > >Hello Reinhard, > > > > > > > > > > > > > > > >thats my problem, I see only the drop and implied rule. Nothing > > > more > > > > > > > >in the info field that helps me. > > > > > > > > > > > > > > > >br > > > > > > > >christian > > > > > > > > > > > > > > > >2005/6/18, Reinhard Stich <[EMAIL PROTECTED]>: > > > > > > > > > hi, > > > > > > > > > > > > > > > > > > what do you see in the "info" field of the logs? > > > > > > > > > > > > > > > > > > there you should see a reason why the firewall is dropping the > > > > > > > >DNS-packets. > > > > > > > > > > > > > > > > > > cheers > > > > > > > > > reinhard > > > > > > > > > > > > > > > > > > At 08:28 18.06.2005, you wrote: > > > > > > > > > >Hello, > > > > > > > > > > > > > > > > > > > >a run into a problem which I dosnt understood. A few days ago > > > our > > > > > > > > > >brandnew HA-Splat installation is - without any changings - > > > > > >dropping > > > > > > > > > >tcp domain dns. I amke allt he necessary settings and > > > activate > > > > > >domain > > > > > > > > > >dns in the implied rules. Now rule 0 ist dropping the dns tcp > > > > > >request. > > > > > > > > > >So, I change the source port of domain_tcp to 1024-xxxx and > > > now > > > > > its > > > > > > > > > >working. > > > > > > > > > > > > > > > > > > > >Any suggestion? > > > > > > > > > >-- > > > > > > > > > >Christian Franke <[EMAIL PROTECTED]> > > > > > > > > > >-------------------------------------------------------- > > > > > > > > > > powered by Sun Java Linux Desktop > > > > > > > > > >-------------------------------------------------------- > > > > > > > > > > > > > > > > > > > >================================================= > > > > > > > > > >To set vacation, Out-Of-Office, or away messages, > > > > > > > > > >send an email to [EMAIL PROTECTED] > > > > > > > > > >in the BODY of the email add: > > > > > > > > > >set fw-1-mailinglist nomail > > > > > > > > > >================================================= > > > > > > > > > >To unsubscribe from this mailing list, > > > > > > > > > >please see the instructions at > > > > > > > > > >http://www.checkpoint.com/services/mailing.html > > > > > > > > > >================================================= > > > > > > > > > >If you have any questions on how to change your > > > > > > > > > >subscription options, email > > > > > > > > > >[EMAIL PROTECTED] > > > > > > > > > >================================================= > > > > > > > > > > > > > > > > > > -- > > > > > > > > > Reinhard Stich ASSIST [EMAIL PROTECTED] > > > > > > > > > Internet Security AG, 1150 Wien, Johnstrasse 29 > > > > > > > > > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > > > > > > > > > > > > > > > > > ================================================= > > > > > > > > > To set vacation, Out-Of-Office, or away messages, > > > > > > > > > send an email to [EMAIL PROTECTED] > > > > > > > > > in the BODY of the email add: > > > > > > > > > set fw-1-mailinglist nomail > > > > > > > > > ================================================= > > > > > > > > > To unsubscribe from this mailing list, > > > > > > > > > please see the instructions at > > > > > > > > > http://www.checkpoint.com/services/mailing.html > > > > > > > > > ================================================= > > > > > > > > > If you have any questions on how to change your > > > > > > > > > subscription options, email > > > > > > > > > [EMAIL PROTECTED] > > > > > > > > > ================================================= > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >-- > > > > > > > >Christian Franke <[EMAIL PROTECTED]> > > > > > > > >-------------------------------------------------------- > > > > > > > > powered by Sun Java Linux Desktop > > > > > > > >-------------------------------------------------------- > > > > > > > > > > > > > > > >================================================= > > > > > > > >To set vacation, Out-Of-Office, or away messages, > > > > > > > >send an email to [EMAIL PROTECTED] > > > > > > > >in the BODY of the email add: > > > > > > > >set fw-1-mailinglist nomail > > > > > > > >================================================= > > > > > > > >To unsubscribe from this mailing list, > > > > > > > >please see the instructions at > > > > > > > >http://www.checkpoint.com/services/mailing.html > > > > > > > >================================================= > > > > > > > >If you have any questions on how to change your > > > > > > > >subscription options, email > > > > > > > >[EMAIL PROTECTED] > > > > > > > >================================================= > > > > > > > > > > > > > > ================================================= > > > > > > > To set vacation, Out-Of-Office, or away messages, > > > > > > > send an email to [EMAIL PROTECTED] > > > > > > > in the BODY of the email add: > > > > > > > set fw-1-mailinglist nomail > > > > > > > ================================================= > > > > > > > To unsubscribe from this mailing list, > > > > > > > please see the instructions at > > > > > > > http://www.checkpoint.com/services/mailing.html > > > > > > > ================================================= > > > > > > > If you have any questions on how to change your > > > > > > > subscription options, email > > > > > > > [EMAIL PROTECTED] > > > > > > > ================================================= > > > > > > > > > > > > > > > > > > > > > > > > >-- > > > > > >Christian Franke <[EMAIL PROTECTED]> > > > > > >-------------------------------------------------------- > > > > > > powered by Sun Java Linux Desktop > > > > > >-------------------------------------------------------- > > > > > > > > > > > >================================================= > > > > > >To set vacation, Out-Of-Office, or away messages, > > > > > >send an email to [EMAIL PROTECTED] > > > > > >in the BODY of the email add: > > > > > >set fw-1-mailinglist nomail > > > > > >================================================= > > > > > >To unsubscribe from this mailing list, > > > > > >please see the instructions at > > > > > >http://www.checkpoint.com/services/mailing.html > > > > > >================================================= > > > > > >If you have any questions on how to change your > > > > > >subscription options, email > > > > > >[EMAIL PROTECTED] > > > > > >================================================= > > > > > > > > > > ================================================= > > > > > To set vacation, Out-Of-Office, or away messages, > > > > > send an email to [EMAIL PROTECTED] > > > > > in the BODY of the email add: > > > > > set fw-1-mailinglist nomail > > > > > ================================================= > > > > > To unsubscribe from this mailing list, > > > > > please see the instructions at > > > > > http://www.checkpoint.com/services/mailing.html > > > > > ================================================= > > > > > If you have any questions on how to change your > > > > > subscription options, email > > > > > [EMAIL PROTECTED] > > > > > ================================================= > > > > > > > > > > > > > -- > > > > Regards, > > > > dhananjoy > > > > India. > > > > GSM # : 091-9899602123 > > > > --------------------------------------------------------------- > > > > Registered Linux user # 375503 > > > > http://counter.li.org > > > > --------------------------------------------------------------- > > > > Some men see things as they are and say why? > > > > I dream things that never were and say "Why Not?" > > > > -Robert F. Kennedy > > > > > > > > ================================================= > > > > To set vacation, Out-Of-Office, or away messages, > > > > send an email to [EMAIL PROTECTED] > > > > in the BODY of the email add: > > > > set fw-1-mailinglist nomail > > > > ================================================= > > > > To unsubscribe from this mailing list, > > > > please see the instructions at > > > > http://www.checkpoint.com/services/mailing.html > > > > ================================================= > > > > If you have any questions on how to change your > > > > subscription options, email > > > > [EMAIL PROTECTED] > > > > ================================================= > > > > > > > > > > > > > -- > > > Christian Franke <[EMAIL PROTECTED]> > > > -------------------------------------------------------- > > > powered by Sun Java Linux Desktop > > > -------------------------------------------------------- > > > > > > ================================================= > > > To set vacation, Out-Of-Office, or away messages, > > > send an email to [EMAIL PROTECTED] > > > in the BODY of the email add: > > > set fw-1-mailinglist nomail > > > ================================================= > > > To unsubscribe from this mailing list, > > > please see the instructions at > > > http://www.checkpoint.com/services/mailing.html > > > ================================================= > > > If you have any questions on how to change your > > > subscription options, email > > > [EMAIL PROTECTED] > > > ================================================= > > > > > > > -- > > Regards, > > dhananjoy > > India. > > GSM # : 091-9899602123 > > --------------------------------------------------------------- > > Registered Linux user # 375503 > > http://counter.li.org > > --------------------------------------------------------------- > > Some men see things as they are and say why? > > I dream things that never were and say "Why Not?" > > -Robert F. Kennedy > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > -- > Christian Franke <[EMAIL PROTECTED]> > -------------------------------------------------------- > powered by Sun Java Linux Desktop > -------------------------------------------------------- > -- Christian Franke <[EMAIL PROTECTED]> -------------------------------------------------------- powered by Sun Java Linux Desktop -------------------------------------------------------- ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
