I found a fix thanks to Nathan! I do not use smartdefense and have not updated it in about 5 months. After all the failed attempts with the CP resolutions the suggestion to do a smart update was done. Once done I no longer see any 995 drops. So go figure! If I did not have the SD subscription I guess I would still be up the creek. Got to love all the hidden smart defense bugs!
-GS -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Ramirez Valdez Sent: Wednesday, March 15, 2006 2:05 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] HFA17: DCE-RPC still logging rule 995 My in-house microsoft guy just pointed me to: http://support.microsoft.com/kb/899148/ "Some firewalls may reject network traffic that originates from Windows Server 2003 Service Pack 1-based computers" There's a fix (registry changes involved) or a patch that must be installed on your domains controllers. Regards. Daniel Ramírez Valdez, CISSP Neoris / Networking Group Office: 52.81.8888.5442 Mobile: 52.81.8064.4845 mailto: [EMAIL PROTECTED] ################################################################################################################# Este documento puede incluir información confidencial y propiedad de Neoris y deberá ser leído sólamente por la o las personas a quienes está dirijido. Si usted ha recibido este mensaje por error, por favor avise inmediatemente al remitente contestando y eliminando este correo. Cualquier punto de vista u opiniones expresadas en este mensaje son del remitente y no necesariamente coinciden con aquellas de Neoris. Este documento no deberá ser reproducido, copiado, distribuido, publicado, ni modificado por terceros sin la autorización por escrito de Neoris. Este mensaje ha sido verificado contra virus. Visítenos en www.neoris.com. This document may include proprietary and confidential information of Neoris, and may only be read by those person or persons to whom it is addressed. If you have received this e-mail message in error, please advise the sender immediately by reply e-mail and delete this message. Any views or opinions expressed in this e-mail are those of the sender and do not necessarily coincide with those of Neoris. This document may not be reproduced, copied, distributed, published, modified or furnished to third parties, without the prior written consent of Neoris. This e-mail message has been scanned for viruses and cleared. Visit us at www.neoris.com ################################################################################################################## ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================